last executing test programs: 34.771245346s ago: executing program 0 (id=758): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 34.069042828s ago: executing program 0 (id=776): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="80"], 0xffd8}}, 0x0) 33.91525129s ago: executing program 0 (id=779): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000300)={{}, {0x0, 0xffffffffffffffff}}, 0x0) 33.766024463s ago: executing program 0 (id=780): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 33.193992941s ago: executing program 0 (id=784): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 30.508694125s ago: executing program 0 (id=802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000080000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 30.053446051s ago: executing program 32 (id=802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000080000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 3.375805146s ago: executing program 1 (id=1037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3.271877318s ago: executing program 1 (id=1038): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x61}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x21) 3.176945679s ago: executing program 1 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0x70) 3.011952741s ago: executing program 1 (id=1042): pipe(0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0x0, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0xfffffffffffffede}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0) 2.968749393s ago: executing program 4 (id=1043): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_CORR={0x10, 0x1, {0x7, 0xd654, 0x101}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 2.756941956s ago: executing program 4 (id=1045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 2.699232047s ago: executing program 1 (id=1046): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc41, &(0x7f0000002280)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2SEmV9Pjb5nZ19b+a9mdWMRPDNCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg4g9euXT6THrYrQAAHqQrI189fdb9HwAeK9f8+x8AAAAAAAAAAAAAAA66FEU8GSlmr6ymsep1R/1yu+/2ndGh4a2rHUlVzUNV+fKrfubsufNfemHwQjcvt6c/oP5e+2y8NnLtUuPlmVuzc5Pz85MTjdHp9vjMxOSOt7Db+pudrA5A49brtydu3JhvnH3+3Ia37wy83//E8YGLg8+eeqZbdnRoeHhkvUi9t3ztvhvSsd0Ij8NRxKlI8dz3fppaEVHE7o9F/cGe+82OVJ04WXVidGi46shUuzW9UL55tXsgiohGT6Vm9xhtfS6i1vdA+7C9ZsRi2fyywSfL7o3MtuZa16cmG1dbcwvthfbM9NXUaW3Zn0YUcSFFLEXESv+9m+uLImqR4jvHVtP1iDjUPQ5frAYGb9+OYh/7uANlOxt9EUvFI3DODrD+KOLVSPGzd07EeL7OVNeaL0S8WuYPIt4q86WIVH4wzke8t8XniEdTLYr4y/L8X1xNE9X1oHtdufy1xlemb8z0lO1eVz7i/eGeK8VDuj8c2ZQPxgG/NtWjiFZ1xV9N9/+XHQAAAAAAAAAAAAAAAAD22pEo4jOR4pX/+JNqXHFU49KPXRz8w4Ff7R0z/vSHbKcs+3xELBY7G5N7OA8MvJqupvSQxxI/zupRxJ/m8X/f+gj1ju5jmwAAAAAAAAAAAAAAAAAAAB5PRfwkUrz47om0FL1zirenbzauta5PdWaF7c79250zfW1tba2ROtnsZC3y68WcSzmXc67kjCLXz9nMOZZzMedSzuWcKznjUK6fs5lzLOdizqWcyzlXckYt18/ZzDmWczHnUs7lnCs544DM3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HFSRBG/iBTf/sZqihQRzYix6ORy/8NuHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ6k9FfD9SNP6oeXddLSJS9X/HifLb+WgeLvOT0Rws86VoXsrZqrLW/NZDaD+705eK+HGk6K+/ffeE5/Pf13l192MQb31z/dVna5081H1z4P3+J44fuzg4/BtPb7ectmrAycvt6dt3GqNDw8MjPatree+f7Fk3kPdb7E3XiYj5N958vTU1NTl3/wvlR2AX1R+hhVR7XHp6Xwv1iDgAzdjDhagdiGY8nL7zGCjv/+9Fit999z+7N/zO/b8ev9J5dfcOHz//s/X7/4ubN7TD+39tc718/y/v6Vvd/5/sWfdi/ttIXy2ivnBrtu94RH3+jTdPtW+1bk7enJw+f/r0lwcHv3zudN/hiPqN9tRkz9KeHC4AAAAAAAAAAAAAAACABycV8fuRovXj1dSIiDvVeK2Bi4PPnnrmUByqxlttGLf92si1S42XZ27Nzk3Oz09ONEan2+MzE5M73V29Gu41OjS8L535UEf2uf1H6i/PzL4x1775xwtbvn+0fun6/MJca3zrt+NIFBHN3jUnqwaPDg1XjZ5qt6arqle3HEz/0fWlIv4rUoyfb6TP53V5/P/mEf4bxv8vbt7QPo3//0TPunKfKRXx80jxO3/1dHy+aufRuOeY5XJ/FylOXvhcLheHy3LdNnSeK9AZGViW/b9I8U+/2Fi2Ox7yyfWyZ3Z8YB8R5fk/Fim+/xffjd/M6zY+/2Hr839084b26fw/1bPu6IbnFey66+TzfypSvPTk2/Fbed0HPf+j++yNE7nw3edz7NP5/1TPuoG839/em64DAAAAAAAAAAA80vpSEX8fKX44XEsv5HU7+f2/ic0b2qff//p0z7qJvZmv6EMXdn1QAQAAAOCA6EtF/CRS3Fx4++4Y6o3jv3vGf/7e+vjPobTp3ernfL9WPTdgL3/+12sg73ds990GAAAAAAAAAAAAAAAAAACAAyWlIl7I86mPVeP5J7adT305UrzyP8/lcul4Wa47D/xA9b1+ZWb61KWpqZnx1kLr+tRkY2S2NT5Z1n0qUqz+7edy3aKaX70733xnjvf1udjnIsXwP3TLduZi785N/tR62TNl2U9Eiv/+x41lu/NYf2q97Nmy7N9Eiq//y9Zlj6+XPVeW/W6k+NHXG92yR8uy3eejfnq97PPjM8U+nBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97a+nuWP48/39fz8vKW9/sme9/kzvVPP8D1fz/2y3fz/z/1XMFFrfbKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfDylKOLNSDF7ZTUt95evO+qX29O374wODW9d7Uiqah6qypdf9TNnz53/0guDF7r5wfX32mfitZFrlxovz9yanZucn5+caIxOt8dnJiZ3vIXd1t/sZHUAGrdevz1x48Z84+zz5za8fWfg/f4njg9cHHz21DPdsqNDw8MjPWVqffe993ukbdYfjiL+OlI8972fph/2RxSx+2PxIZ+d/Xak6sTJqhOjQ8NVR6baremF8s2r3QNRRDR6KjW7x+gBnItdaUYsVgvV96Hhxshsa651fWqycbU1t9BeaM9MX02d1pb9aUQRF1LEUkSs9N+7ub4o4vVI8Z1jq+lf+yMOdY/DF6+MfPX02e3bUexXB3embGejL2KpeATO2QHWH0X8c6T42Tsn4t/6I2rR+YovRLxa5g8i3orO+U7lB+N8xHtbfI54NNWiiP8vz//F1fROf3k9KP88lZfNy19rfGX6xkxP2e515ZG/PzxIB/zaVI8iflRd8VfTv/tzDQAAAAAAAAAAAAAAAHCAFPHrkeLFd0+kanxwNfZvZLY1156+2bjWuj7VGdbXHfvXHTO9tra21kidbOYcy7nYydQtt5zXr+SMItfP2SyzvrY2ll8v5lzKuZxzJWccyvVzNnOO5VzMuZRzOedKzqjl+jmbOcdyLuZcyrmccyVnHJCxewAAAAAAAAAAAAAAAAAAwMdLUf2X4tvfWE1r/Z35pceik8vmA/3Y+2UAAAD//+ic894=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x700) 2.51707826s ago: executing program 4 (id=1048): capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x7, 0x0, 0x81, 0xfffffffb}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x7040, 0x0) 2.405636601s ago: executing program 3 (id=1049): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x3, 0x4) 2.332590473s ago: executing program 4 (id=1051): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.315050433s ago: executing program 3 (id=1052): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, &(0x7f00000002c0)=""/219}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x28}, {&(0x7f0000000200)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000340)="747369587e0a4e47adce", 0xa}], 0x3, 0x0, 0x0) 2.184213375s ago: executing program 4 (id=1054): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c00, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6213, &(0x7f0000012d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 2.149515296s ago: executing program 3 (id=1055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001380)=""/222, 0xde}, {&(0x7f0000001480)=""/253, 0xfd}, {&(0x7f0000001580)=""/99, 0x63}, {&(0x7f0000001600)=""/242, 0xf2}, {&(0x7f0000001740)=""/31, 0x1f}], 0x6}, 0x6}], 0x1, 0x100, 0x0) 1.983649308s ago: executing program 3 (id=1058): setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x1, 0x0, 0x404042bbe) 1.898261999s ago: executing program 3 (id=1060): ioctl$KVM_CAP_HYPERV_SEND_IPI(0xffffffffffffffff, 0x4068aea3, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16, @ANYRESDEC], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c5420) 1.384030068s ago: executing program 5 (id=1064): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) 1.317939879s ago: executing program 5 (id=1067): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @mcast2}, {0xa, 0xfffe, 0x7, @empty}, r1}}, 0x48) 1.168030291s ago: executing program 5 (id=1069): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffffc0, 0x6, 0x800, 0x1000000, 0x709d}, 0x7, 0x1, 0x7, 0xfffffffe, 0xb38, 0xe, 0x3, 0xc, 0x1, 0x30, {0x99, 0x7, 0x6, 0x401, 0x6, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000) 1.094059122s ago: executing program 5 (id=1070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x13, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x0, 0x9d, 0x7}}, @mesh_config={0x71, 0x7, {0x1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, 0x15}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.002463724s ago: executing program 5 (id=1071): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(r0, 0x18, 0x0, 0x4) 939.739725ms ago: executing program 5 (id=1073): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x5, 0x4443, &(0x7f0000000140)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002100210100000000ffdb09250a000000000000000000000005001600"], 0x2c}}, 0x80) 674.665269ms ago: executing program 1 (id=1076): unshare(0x20000400) r0 = socket(0x1e, 0x4, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x2140}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 523.640482ms ago: executing program 2 (id=1079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r1, 0x731, 0x4, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x1}, 0x8000) 459.897892ms ago: executing program 2 (id=1080): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000002c0)=0x1, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) 383.964053ms ago: executing program 2 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r1, 0xd1b, 0x70bd25, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 291.896945ms ago: executing program 2 (id=1082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) 238.259586ms ago: executing program 2 (id=1083): r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0x240) r1 = memfd_create(&(0x7f0000000440)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW\xe3\x9aHh\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00;\\>P\xe0r1\xa6\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\xb3\xe2\x04N\x8d\v\x0f\xbev\x1e\xbf\"x\xa0p\x18\xe5i\x1ct\xd9\x84/\xcf\x1c\x91O\xfb3\xfaig\xc8\x7fd\xe5v\xdf\x9b\x15\xda\x91\xfb\xaa\xebt\xe8\xfca\xb4\x9f\x10v2|\x12^\xd4\x15/\x0es\x13\x9f\xe2L\xd5HF\xe9s\xab\x00\x17\x95\xf0\xe303`\xec:\x8a3\x83O\x1b`lMQ\xaf\xcc\x17\va\x19A\xdc\xe4,oz\xd6,\xe3\xffi\x9fjX9\f\xbbf\xb9\x8c\x12\x8f\xfa\"\x9e', 0x5) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 237.363826ms ago: executing program 3 (id=1084): syz_mount_image$minix(&(0x7f0000000680), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB="8e7bf099b50610f9b90386fcad5cf65dc7e4309c76698d025637fd42cd2c1d9378e6212cfe715e5d3f5cfa60dad844a8ad9992f586604853e9352ec7277d8514b9150dcef6"], 0x1, 0x1af, &(0x7f0000000480)="$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") r0 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000380)='.\x00', 0x2042023, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000900)) fremovexattr(r0, 0x0) 64.989029ms ago: executing program 4 (id=1085): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r0}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) 0s ago: executing program 2 (id=1086): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0xc090, &(0x7f0000002700)=ANY=[], 0x1, 0x295, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x5) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) kernel console output (not intermixed with test programs): 0 [ 77.366984][ T5032] EXT4-fs (loop4): Remounting filesystem read-only [ 77.369604][ T5028] comedi: valid board names for labpc_pci driver are: [ 77.369637][ T5028] labpc_pci [ 77.379849][ T5032] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.277: attempt to clear invalid blocks 983260 len 1 [ 77.402424][ T5032] EXT4-fs (loop4): Remounting filesystem read-only [ 77.409043][ T5032] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm syz.4.277: Invalid inode table block 0 in block_group 0 [ 77.432018][ T5032] EXT4-fs (loop4): Remounting filesystem read-only [ 77.438643][ T5032] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 77.456733][ T5032] EXT4-fs (loop4): Remounting filesystem read-only [ 77.464130][ T5028] comedi: valid board names for adl_pci9118 driver are: [ 77.469477][ T5032] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 77.500058][ T5032] EXT4-fs (loop4): Remounting filesystem read-only [ 77.501494][ T5034] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 77.506903][ T5032] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm syz.4.277: Invalid inode table block 0 in block_group 0 [ 77.531303][ T5032] EXT4-fs (loop4): Remounting filesystem read-only [ 77.537850][ T5032] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 77.551675][ T5028] pci9118dg [ 77.567979][ T5028] pci9118hg [ 77.570939][ T5034] REISERFS (device loop1): using ordered data mode [ 77.579374][ T5034] reiserfs: using flush barriers [ 77.581424][ T5028] pci9118hr [ 77.601895][ T5032] EXT4-fs (loop4): Remounting filesystem read-only [ 77.604341][ T5051] loop2: detected capacity change from 0 to 256 [ 77.609953][ T5032] EXT4-fs error (device loop4): ext4_truncate:4273: inode #11: comm syz.4.277: mark_inode_dirty error [ 77.615233][ T5034] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.640601][ T5028] comedi: valid board names for 8255_pci driver are: [ 77.645363][ T5034] REISERFS (device loop1): checking transaction log (loop1) [ 77.658627][ T5032] EXT4-fs (loop4): Remounting filesystem read-only [ 77.667702][ T5034] REISERFS (device loop1): Using rupasov hash to sort names [ 77.686460][ T5032] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 77.696234][ T5028] 8255_pci [ 77.698503][ T5034] REISERFS (device loop1): using 3.5.x disk format [ 77.699354][ T5028] comedi: valid board names for s526 driver are: [ 77.699364][ T5028] s526 [ 77.736441][ T5034] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 77.748945][ T5051] FAT-fs (loop2): Directory bread(block 64) failed [ 77.751185][ T5032] EXT4-fs (loop4): Remounting filesystem read-only [ 77.780991][ T5028] comedi: valid board names for multiq3 driver are: [ 77.781040][ T5051] FAT-fs (loop2): Directory bread(block 65) failed [ 77.805898][ T5028] multiq3 [ 77.812668][ T5034] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 77.824407][ T5051] FAT-fs (loop2): Directory bread(block 66) failed [ 77.829314][ T5032] EXT4-fs (loop4): 1 truncate cleaned up [ 77.845877][ T5028] comedi: valid board names for pcmuio driver are: [ 77.879280][ T5032] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 77.891931][ T5051] FAT-fs (loop2): Directory bread(block 67) failed [ 77.904816][ T5034] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 77.916014][ T5028] pcmuio48 [ 77.919137][ T5028] pcmuio96 [ 77.935233][ T5034] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 77.944190][ T5051] FAT-fs (loop2): Directory bread(block 68) failed [ 77.980312][ T5028] comedi: valid board names for pcmmio driver are: [ 78.001185][ T5051] FAT-fs (loop2): Directory bread(block 69) failed [ 78.020934][ T5051] FAT-fs (loop2): Directory bread(block 70) failed [ 78.024742][ T5034] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 78.029014][ T5051] FAT-fs (loop2): Directory bread(block 71) failed [ 78.043445][ T5028] pcmmio [ 78.043458][ T5028] comedi: valid board names for pcmda12 driver are: [ 78.043466][ T5028] pcmda12 [ 78.043471][ T5028] comedi: valid board names for pcmad driver are: [ 78.043479][ T5028] pcmad12 [ 78.043485][ T5028] pcmad16 [ 78.043490][ T5028] comedi: valid board names for ni_labpc driver are: [ 78.043497][ T5028] lab-pc-1200 [ 78.043503][ T5028] lab-pc-1200ai [ 78.043509][ T5028] lab-pc+ [ 78.043514][ T5028] comedi: valid board names for atmio16 driver are: [ 78.043521][ T5028] atmio16 [ 78.043527][ T5028] atmio16d [ 78.043532][ T5028] comedi: valid board names for ni_at_ao driver are: [ 78.043540][ T5028] at-ao-6 [ 78.043545][ T5028] at-ao-10 [ 78.043551][ T5028] comedi: valid board names for ni_at_a2150 driver are: [ 78.043559][ T5028] ni_at_a2150 [ 78.043565][ T5028] comedi: valid board names for adq12b driver are: [ 78.043571][ T5028] adq12b [ 78.043576][ T5028] comedi: valid board names for mpc624 driver are: [ 78.043583][ T5028] mpc624 [ 78.043588][ T5028] comedi: valid board names for c6xdigio driver are: [ 78.082539][ T5051] FAT-fs (loop2): Directory bread(block 72) failed [ 78.104102][ T5028] c6xdigio [ 78.157952][ T5032] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.277: Invalid block bitmap block 0 in block_group 0 [ 78.178543][ T5032] EXT4-fs (loop4): Remounting filesystem read-only [ 78.186172][ T5028] comedi: valid board names for aio_iiro_16 driver are: [ 78.206761][ T5051] FAT-fs (loop2): Directory bread(block 73) failed [ 78.229605][ T5028] aio_iiro_16 [ 78.237051][ T5028] comedi: valid board names for aio_aio12_8 driver are: [ 78.271570][ T5028] aio_aio12_8 [ 78.274979][ T5028] aio_ai12_8 [ 78.283299][ T5028] aio_ao12_4 [ 78.286600][ T5028] comedi: valid board names for fl512 driver are: [ 78.318755][ T5028] fl512 [ 78.334281][ T5028] comedi: valid board names for dmm32at driver are: [ 78.366489][ T5028] dmm32at [ 78.389255][ T5028] comedi: valid board names for dt282x driver are: [ 78.402812][ T5063] loop3: detected capacity change from 0 to 24 [ 78.409276][ T5028] dt2821 [ 78.422204][ T5028] dt2821-f [ 78.428618][ T5028] dt2821-g [ 78.442140][ T5028] dt2823 [ 78.448239][ T5028] dt2824-pgh [ 78.510868][ T5028] dt2824-pgl [ 78.514256][ T5028] dt2825 [ 78.517196][ T5028] dt2827 [ 78.520126][ T5028] dt2828 [ 78.556588][ T5028] dt2829 [ 78.559923][ T5028] dt21-ez [ 78.563657][ T5028] dt23-ez [ 78.566826][ T5028] dt24-ez [ 78.569983][ T5028] dt24-ez-pgl [ 78.574535][ T5028] comedi: valid board names for dt2817 driver are: [ 78.581494][ T5028] dt2817 [ 78.584433][ T5028] comedi: valid board names for dt2815 driver are: [ 78.598038][ T5028] dt2815 [ 78.607616][ T5028] comedi: valid board names for dt2814 driver are: [ 78.614393][ T5028] dt2814 [ 78.617334][ T5028] comedi: valid board names for dt2811 driver are: [ 78.639700][ T5028] dt2811-pgh [ 78.648622][ T5028] dt2811-pgl [ 78.672711][ T5028] comedi: valid board names for dt2801 driver are: [ 78.700624][ T5028] dt2801 [ 78.704138][ T5028] comedi: valid board names for das6402 driver are: [ 78.736350][ T5028] das6402-12 [ 78.739708][ T5028] das6402-16 [ 78.757030][ T5028] comedi: valid board names for das1800 driver are: [ 78.787999][ T5028] das-1701st [ 78.792477][ T5028] das-1701st-da [ 78.796049][ T5028] das-1702st [ 78.799445][ T5028] das-1702st-da [ 78.810142][ T5028] das-1702hr [ 78.820981][ T5028] das-1702hr-da [ 78.824640][ T5028] das-1701ao [ 78.835812][ T5028] das-1702ao [ 78.839123][ T5028] das-1801st [ 78.873304][ T5028] das-1801st-da [ 78.884007][ T5028] das-1802st [ 78.887322][ T5028] das-1802st-da [ 78.912025][ T5086] loop2: detected capacity change from 0 to 64 [ 78.920876][ T5028] das-1802hr [ 78.924258][ T5028] das-1802hr-da [ 78.932960][ T5028] das-1801hc [ 78.936263][ T5028] das-1802hc [ 78.974348][ T5028] das-1801ao [ 78.982850][ T5028] das-1802ao [ 78.997420][ T5028] comedi: valid board names for das800 driver are: [ 79.023281][ T5028] das-800 [ 79.033398][ T5028] cio-das800 [ 79.047324][ T5028] das-801 [ 79.050381][ T5028] cio-das801 [ 79.070628][ T5028] das-802 [ 79.079574][ T5028] cio-das802 [ 79.083166][ T5028] cio-das802/16 [ 79.087315][ T5028] comedi: valid board names for isa-das08 driver are: [ 79.120719][ T5028] isa-das08 [ 79.124107][ T5028] das08-pgm [ 79.127322][ T5028] das08-pgh [ 79.130606][ T5028] das08-pgl [ 79.134286][ T5028] das08-aoh [ 79.140992][ T5028] das08-aol [ 79.150652][ T5028] das08-aom [ 79.175786][ T5028] das08/jr-ao [ 79.179287][ T5028] das08jr-16-ao [ 79.214648][ T5028] pc104-das08 [ 79.218145][ T5028] das08jr/16 [ 79.249637][ T5028] comedi: valid board names for das16m1 driver are: [ 79.277532][ T5028] das16m1 [ 79.280675][ T5028] comedi: valid board names for dac02 driver are: [ 79.308358][ T5028] dac02 [ 79.326434][ T5028] comedi: valid board names for rti802 driver are: [ 79.331687][ T5114] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 79.335825][ T5112] loop4: detected capacity change from 0 to 1024 [ 79.362372][ T5028] rti802 [ 79.380555][ T5028] comedi: valid board names for rti800 driver are: [ 79.390669][ T5028] rti800 [ 79.397869][ T5028] rti815 [ 79.404610][ T5028] comedi: valid board names for pcm3724 driver are: [ 79.426937][ T5028] pcm3724 [ 79.432074][ T5028] comedi: valid board names for pcl818 driver are: [ 79.473678][ T5028] pcl818l [ 79.476740][ T5028] pcl818h [ 79.479766][ T5028] pcl818hd [ 79.527638][ T5120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 79.534983][ T5122] loop2: detected capacity change from 0 to 256 [ 79.559717][ T5028] pcl818hg [ 79.565718][ T5028] pcl818 [ 79.592673][ T5028] pcl718 [ 79.595664][ T5028] pcm3718 [ 79.599637][ T5028] comedi: valid board names for pcl816 driver are: [ 79.605793][ T5126] program syz.3.321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.619675][ T5112] hfsplus: bad catalog entry type [ 79.631922][ T5122] exfat: Deprecated parameter 'namecase' [ 79.636912][ T5028] pcl816 [ 79.653439][ T5028] pcl814b [ 79.653956][ T4853] hfsplus: b-tree write err: -5, ino 4 [ 79.656514][ T5028] comedi: valid board names for pcl812 driver are: [ 79.656523][ T5028] pcl812 [ 79.656529][ T5028] pcl812pg [ 79.656534][ T5028] acl8112pg [ 79.656545][ T5028] acl8112dg [ 79.656551][ T5028] acl8112hg [ 79.656557][ T5028] a821pgl [ 79.656563][ T5028] a821pglnda [ 79.656569][ T5028] a821pgh [ 79.656575][ T5028] a822pgl [ 79.656579][ T5028] a822pgh [ 79.656584][ T5028] a823pgl [ 79.709213][ T5028] a823pgh [ 79.712335][ T5028] pcl813 [ 79.715275][ T5028] pcl813b [ 79.743753][ T5122] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 79.775604][ T5130] binder: 5129:5130 ioctl c0306201 200000000480 returned -14 [ 79.911115][ T5028] acl8113 [ 79.914174][ T5028] iso813 [ 79.949733][ T5028] acl8216 [ 79.978137][ T5028] a826pg [ 79.978151][ T5028] comedi: valid board names for pcl730 driver are: [ 79.978160][ T5028] pcl730 [ 79.978167][ T5028] iso730 [ 79.978172][ T5028] acl7130 [ 79.978178][ T5028] pcm3730 [ 79.978184][ T5028] pcl725 [ 79.978190][ T5028] p8r8dio [ 79.978196][ T5028] acl7225b [ 79.978203][ T5028] p16r16dio [ 79.978209][ T5028] pcl733 [ 79.978215][ T5028] pcl734 [ 79.978222][ T5028] opmm-1616-xt [ 79.978228][ T5028] pearl-mm-p [ 79.978235][ T5028] ir104-pbf [ 79.978241][ T5028] comedi: valid board names for pcl726 driver are: [ 79.978250][ T5028] pcl726 [ 79.978256][ T5028] pcl727 [ 79.978262][ T5028] pcl728 [ 79.978269][ T5028] acl6126 [ 79.978275][ T5028] acl6128 [ 79.978281][ T5028] comedi: valid board names for pcl724 driver are: [ 79.978290][ T5028] pcl724 [ 79.978296][ T5028] pcl722 [ 79.978303][ T5028] pcl731 [ 79.978309][ T5028] acl7122 [ 79.978315][ T5028] acl7124 [ 79.978321][ T5028] pet48dio [ 79.978328][ T5028] pcmio48 [ 79.978334][ T5028] onyx-mm-dio [ 79.978341][ T5028] comedi: valid board names for pcl711 driver are: [ 79.978349][ T5028] pcl711 [ 79.978355][ T5028] pcl711b [ 79.978362][ T5028] acl8112hg [ 79.978368][ T5028] acl8112dg [ 79.978374][ T5028] comedi: valid board names for amplc_pc263 driver are: [ 79.978383][ T5028] pc263 [ 79.978389][ T5028] comedi: valid board names for amplc_pc236 driver are: [ 79.978397][ T5028] pc36at [ 79.978403][ T5028] comedi: valid board names for amplc_dio200 driver are: [ 79.978411][ T5028] pc212e [ 79.978418][ T5028] pc214e [ 79.978424][ T5028] pc215e [ 79.978430][ T5028] pc218e [ 79.978436][ T5028] pc272e [ 79.978442][ T5028] comedi: valid board names for comedi_parport driver are: [ 79.978451][ T5028] comedi_parport [ 79.978458][ T5028] comedi: valid board names for comedi_test driver are: [ 79.978466][ T5028] comedi_test [ 79.978472][ T5028] comedi: valid board names for comedi_bond driver are: [ 79.978480][ T5028] comedi_bond [ 80.387010][ T5152] loop0: detected capacity change from 0 to 8192 [ 80.447149][ T5152] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 80.447577][ T5152] REISERFS (device loop0): using ordered data mode [ 80.447588][ T5152] reiserfs: using flush barriers [ 80.468897][ T5152] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.639060][ T5150] loop1: detected capacity change from 0 to 32768 [ 80.743120][ T5150] XFS (loop1): Mounting V5 Filesystem [ 80.821380][ T5152] REISERFS (device loop0): checking transaction log (loop0) [ 80.880860][ T5144] loop3: detected capacity change from 0 to 32768 [ 80.935194][ T5150] XFS (loop1): Ending clean mount [ 80.960556][ T5152] REISERFS (device loop0): Using r5 hash to sort names [ 80.971819][ T5152] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 80.998513][ T5152] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 81.186248][ T4182] XFS (loop1): Unmounting Filesystem [ 81.187914][ T5152] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 81.274391][ T5152] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 81.307720][ T5187] tipc: Enabling of bearer rejected, failed to enable media [ 81.317050][ T5152] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 81.513109][ T5195] loop4: detected capacity change from 0 to 256 [ 81.541189][ T1109] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 81.821111][ T1109] usb 4-1: Using ep0 maxpacket: 8 [ 81.849629][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 81.849644][ T26] audit: type=1326 audit(1753772011.505:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5202 comm="syz.4.356" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f472f2199a9 code=0x0 [ 82.142134][ T1109] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=81.ea [ 82.157169][ T1109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.165704][ T1109] usb 4-1: Product: syz [ 82.170162][ T1109] usb 4-1: Manufacturer: syz [ 82.176121][ T1109] usb 4-1: SerialNumber: syz [ 82.191805][ T1109] usb 4-1: config 0 descriptor?? [ 82.214779][ T1112] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.235477][ T1109] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 82.246003][ T1109] usb 4-1: setting power ON [ 82.247976][ T5209] loop0: detected capacity change from 0 to 32768 [ 82.253191][ T1109] dvb-usb: bulk message failed: -22 (2/0) [ 82.301849][ T1109] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.351194][ T1109] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 82.366083][ T1109] usb 4-1: media controller created [ 82.410298][ T1109] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.442409][ T5185] dvb-usb: bulk message failed: -22 (3/0) [ 82.471990][ T1109] usb 4-1: selecting invalid altsetting 6 [ 82.482436][ T1109] usb 4-1: digital interface selection failed (-22) [ 82.490398][ T1109] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 82.502819][ T5226] netlink: 'syz.0.366': attribute type 5 has an invalid length. [ 82.515474][ T5226] device ip6erspan0 entered promiscuous mode [ 82.541253][ T1109] usb 4-1: setting power OFF [ 82.547617][ T1109] dvb-usb: bulk message failed: -22 (2/0) [ 82.562484][ T1109] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 82.597248][ T1109] (NULL device *): no alternate interface [ 82.601022][ T1112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.631333][ T1112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.668623][ T1112] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.688266][ T1109] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 82.720923][ T1112] usb 2-1: New USB device found, idVendor=1b96, idProduct=0007, bcdDevice= 0.00 [ 82.729989][ T1112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.753966][ T1109] usb 4-1: USB disconnect, device number 6 [ 82.796302][ T5228] loop0: detected capacity change from 0 to 8192 [ 82.810124][ T1112] usb 2-1: config 0 descriptor?? [ 82.887086][ T5224] loop2: detected capacity change from 0 to 32768 [ 82.910673][ T5232] loop4: detected capacity change from 0 to 4096 [ 82.947666][ T5228] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 82.962456][ T5232] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 82.986265][ T5228] REISERFS (device loop0): using ordered data mode [ 83.000864][ T5228] reiserfs: using flush barriers [ 83.076494][ T5228] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.161197][ T5228] REISERFS (device loop0): checking transaction log (loop0) [ 83.199937][ T5228] REISERFS (device loop0): Using r5 hash to sort names [ 83.216892][ T5228] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 83.249232][ T5228] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 83.282424][ T5237] loop3: detected capacity change from 0 to 256 [ 83.314666][ T1112] ntrig 0003:1B96:0007.0004: hidraw0: USB HID v0.00 Device [HID 1b96:0007] on usb-dummy_hcd.1-1/input0 [ 83.362055][ T5237] exfat: Deprecated parameter 'namecase' [ 83.418952][ T5237] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 83.538359][ T1112] usb 2-1: USB disconnect, device number 3 [ 83.605697][ T5247] loop4: detected capacity change from 0 to 4096 [ 83.729235][ T5251] fido_id[5251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 83.837013][ T5247] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 83.906605][ T5262] netlink: 'syz.3.380': attribute type 6 has an invalid length. [ 84.267269][ T5278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 84.471983][ T5293] netlink: 'syz.4.396': attribute type 2 has an invalid length. [ 84.707375][ T5309] netlink: 'syz.4.404': attribute type 30 has an invalid length. [ 84.763975][ T5268] loop2: detected capacity change from 0 to 40427 [ 84.800019][ T5268] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 84.808280][ T5312] netlink: 132 bytes leftover after parsing attributes in process `syz.1.406'. [ 84.829128][ T5268] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 84.892972][ T5268] F2FS-fs (loop2): invalid crc value [ 84.907268][ T5314] loop3: detected capacity change from 0 to 2048 [ 84.963234][ T5268] F2FS-fs (loop2): Found nat_bits in checkpoint [ 85.030335][ T5314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.136665][ T5268] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 85.150796][ T5268] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 85.241532][ T5340] loop1: detected capacity change from 0 to 256 [ 85.298406][ T5340] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 86.076822][ T5334] loop0: detected capacity change from 0 to 32768 [ 86.085150][ T5337] loop3: detected capacity change from 0 to 32768 [ 86.141420][ T5334] XFS: ikeep mount option is deprecated. [ 86.147124][ T5334] XFS: ikeep mount option is deprecated. [ 86.181699][ T5337] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 86.181699][ T5337] [ 86.228294][ T5367] loop4: detected capacity change from 0 to 1024 [ 86.265015][ T5334] XFS (loop0): Mounting V5 Filesystem [ 86.539279][ T5334] XFS (loop0): Ending clean mount [ 86.546101][ T5334] XFS (loop0): Quotacheck needed: Please wait. [ 86.676747][ T5334] XFS (loop0): Quotacheck: Done. [ 86.745464][ T5394] loop2: detected capacity change from 0 to 128 [ 86.786377][ T5394] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿ" or missing value [ 86.920388][ T4184] XFS (loop0): Unmounting Filesystem [ 87.354771][ T5391] loop4: detected capacity change from 0 to 32768 [ 87.413953][ T5416] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.430571][ T5415] netlink: 'syz.1.448': attribute type 10 has an invalid length. [ 87.490893][ T4243] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.510242][ T5415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.531162][ T5415] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 87.567984][ T5415] syz.1.448 (5415) used greatest stack depth: 20320 bytes left [ 87.750821][ T4243] usb 3-1: Using ep0 maxpacket: 16 [ 87.888769][ T5426] xt_CT: No such helper "netbios-ns" [ 88.051272][ T4243] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 88.076291][ T4243] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 88.114973][ T4243] usb 3-1: Product: syz [ 88.125374][ T5439] loop4: detected capacity change from 0 to 2048 [ 88.125486][ T4243] usb 3-1: Manufacturer: syz [ 88.140637][ T5435] loop1: detected capacity change from 0 to 4096 [ 88.168340][ T4243] usb 3-1: SerialNumber: syz [ 88.188416][ T4243] usb 3-1: config 0 descriptor?? [ 88.204296][ T5439] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 88.248818][ T5439] attempt to access beyond end of device [ 88.248818][ T5439] loop4: rw=0, want=111568486482, limit=2048 [ 88.268226][ T5435] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 88.308010][ T5439] NILFS (loop4): I/O error reading meta-data file (ino=4, block-offset=0) [ 88.369309][ T5439] NILFS (loop4): error -5 while loading last checkpoint (checkpoint number=2) [ 88.428975][ T5435] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 88.510553][ T5449] loop3: detected capacity change from 0 to 2048 [ 88.515615][ T5435] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 88.560321][ T23] usb 3-1: USB disconnect, device number 4 [ 88.595977][ T4182] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 88.605090][ T4182] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 88.630654][ T5455] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 88.649930][ T5449] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 88.766397][ T5458] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.766639][ T5449] attempt to access beyond end of device [ 88.766639][ T5449] loop3: rw=524288, want=33554432, limit=2048 [ 89.026331][ T5469] loop1: detected capacity change from 0 to 164 [ 89.064894][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.145329][ T5469] Unable to read rock-ridge attributes [ 89.219335][ T5469] Unable to read rock-ridge attributes [ 89.267313][ T5469] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 89.411004][ T4963] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 89.451151][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 89.452110][ T5486] kernel profiling enabled (shift: 9) [ 89.470806][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.500253][ T21] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 89.550793][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.575927][ T21] usb 1-1: config 0 descriptor?? [ 89.600154][ T5493] loop3: detected capacity change from 0 to 64 [ 89.700983][ T4963] usb 5-1: Using ep0 maxpacket: 8 [ 90.021159][ T4963] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 90.041990][ T4963] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 90.057180][ T4963] usb 5-1: Product: syz [ 90.070787][ T4963] usb 5-1: Manufacturer: syz [ 90.084244][ T21] elo 0003:04E7:0030.0005: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.0-1/input0 [ 90.085380][ T4963] usb 5-1: SerialNumber: syz [ 90.148353][ T4963] usb 5-1: config 0 descriptor?? [ 90.191521][ T5517] loop3: detected capacity change from 0 to 128 [ 90.300913][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 90.324855][ T5517] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.342192][ T1112] usb 1-1: USB disconnect, device number 3 [ 90.362066][ T5517] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.407786][ T5510] loop2: detected capacity change from 0 to 32768 [ 90.572813][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 90.690928][ T23] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 90.734634][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 90.754434][ T23] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 90.783852][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.826458][ T23] usb 2-1: config 0 descriptor?? [ 90.917461][ T4963] usb 5-1: USB disconnect, device number 5 [ 91.322842][ T23] monterey 0003:0566:3004.0006: unknown main item tag 0x0 [ 91.338537][ T23] monterey 0003:0566:3004.0006: unknown main item tag 0x0 [ 91.358525][ T23] monterey 0003:0566:3004.0006: unknown main item tag 0x0 [ 91.379420][ T23] monterey 0003:0566:3004.0006: unknown main item tag 0x0 [ 91.409193][ T23] monterey 0003:0566:3004.0006: unknown main item tag 0x0 [ 91.437414][ T5535] loop0: detected capacity change from 0 to 128 [ 91.454097][ T23] monterey 0003:0566:3004.0006: hidraw0: USB HID v1.6c Device [HID 0566:3004] on usb-dummy_hcd.1-1/input0 [ 91.533982][ T4963] usb 2-1: USB disconnect, device number 4 [ 91.589879][ T5535] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.609108][ T5535] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.772709][ T5551] netlink: 'syz.2.503': attribute type 10 has an invalid length. [ 91.834339][ T5548] fido_id[5548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 91.892792][ T5551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.916129][ T5558] loop3: detected capacity change from 0 to 64 [ 91.923759][ T5551] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 91.989299][ T5560] loop4: detected capacity change from 0 to 1024 [ 92.183461][ T5574] mkiss: ax0: crc mode is auto. [ 92.249301][ T154] hfsplus: b-tree write err: -5, ino 4 [ 92.350118][ T5579] usb usb8: usbfs: process 5579 (syz.4.517) did not claim interface 0 before use [ 92.374809][ T5583] loop2: detected capacity change from 0 to 164 [ 92.479164][ T5583] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 92.529832][ T5583] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 92.650900][ T4966] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 92.880646][ T5605] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 92.887530][ T5605] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.896153][ T4966] usb 1-1: Using ep0 maxpacket: 16 [ 92.941045][ T5605] vhci_hcd vhci_hcd.0: Device attached [ 93.041218][ T4966] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 93.070984][ T4966] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.107351][ T4966] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.146247][ T4966] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.170870][ T4966] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 93.197398][ T5622] loop3: detected capacity change from 0 to 64 [ 93.201816][ T4966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.248492][ T4966] usb 1-1: config 0 descriptor?? [ 93.274801][ T5568] loop1: detected capacity change from 0 to 40427 [ 93.336222][ T5568] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 93.382179][ T5568] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 93.411210][ T4963] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 93.418776][ T1109] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.428350][ T5568] F2FS-fs (loop1): invalid crc value [ 93.435303][ T5628] loop4: detected capacity change from 0 to 64 [ 93.470073][ T5568] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.567217][ T5568] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 93.585528][ T5568] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.710919][ T1109] usb 3-1: Using ep0 maxpacket: 16 [ 93.753743][ T4966] playstation 0003:054C:0CE6.0007: item fetching failed at offset 0/2 [ 93.784957][ T4966] playstation 0003:054C:0CE6.0007: Parse failed [ 93.808807][ T4966] playstation: probe of 0003:054C:0CE6.0007 failed with error -22 [ 94.004214][ T4235] usb 1-1: USB disconnect, device number 4 [ 94.026155][ T1109] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 94.070451][ T1109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.090721][ T1109] usb 3-1: Product: syz [ 94.095611][ T1109] usb 3-1: Manufacturer: syz [ 94.103030][ T1109] usb 3-1: SerialNumber: syz [ 94.127764][ T1109] usb 3-1: config 0 descriptor?? [ 94.177227][ T1109] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 94.198366][ T1109] usb 3-1: Detected FT232H [ 94.306973][ T5640] loop4: detected capacity change from 0 to 32768 [ 94.327521][ T5640] XFS: ikeep mount option is deprecated. [ 94.350397][ T5640] XFS: ikeep mount option is deprecated. [ 94.379933][ T5606] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 94.399274][ T9] vhci_hcd: stop threads [ 94.409087][ T1109] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 94.440824][ T1112] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 94.455575][ T9] vhci_hcd: release socket [ 94.461659][ T1109] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 94.483101][ T9] vhci_hcd: disconnect device [ 94.487939][ T5640] XFS (loop4): Mounting V5 Filesystem [ 94.501265][ T1109] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 94.512068][ T1109] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 94.540697][ T1109] usb 3-1: USB disconnect, device number 5 [ 94.556457][ T1109] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 94.599401][ T5640] XFS (loop4): Ending clean mount [ 94.606387][ T5640] XFS (loop4): Quotacheck needed: Please wait. [ 94.633067][ T1109] ftdi_sio 3-1:0.0: device disconnected [ 94.680707][ T5640] XFS (loop4): Quotacheck: Done. [ 94.691067][ T1112] usb 4-1: Using ep0 maxpacket: 32 [ 94.821255][ T1112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.838761][ T4191] XFS (loop4): Unmounting Filesystem [ 94.861272][ T1112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.910431][ T1112] usb 4-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 94.929973][ T1112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.955324][ T1112] usb 4-1: config 0 descriptor?? [ 95.054925][ T5665] loop2: detected capacity change from 0 to 2048 [ 95.174903][ T5670] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.230193][ T5665] NILFS (loop2): bad btree root (ino=16): level = 164, flags = 0x1, nchildren = 1 [ 95.345315][ T5674] loop0: detected capacity change from 0 to 736 [ 95.455816][ T5678] loop1: detected capacity change from 0 to 128 [ 95.469130][ T1112] glorious 0003:258A:0033.0008: unknown main item tag 0x2 [ 95.497650][ T1112] glorious 0003:258A:0033.0008: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.3-1/input0 [ 95.551216][ T5678] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 95.605944][ T5678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.708644][ T1112] usb 4-1: USB disconnect, device number 7 [ 95.807285][ T5685] fido_id[5685]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 95.867004][ T5692] loop4: detected capacity change from 0 to 512 [ 96.050110][ T5692] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 96.076509][ T5702] loop1: detected capacity change from 0 to 8192 [ 96.083837][ T5692] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.165223][ T5702] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 96.205544][ T5702] REISERFS (device loop1): using ordered data mode [ 96.273529][ T5702] reiserfs: using flush barriers [ 96.307366][ T5702] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.386712][ T5714] loop0: detected capacity change from 0 to 1024 [ 96.447626][ T5702] REISERFS (device loop1): checking transaction log (loop1) [ 96.509395][ T5702] REISERFS (device loop1): Using r5 hash to sort names [ 96.517921][ T5716] option changes via remount are deprecated (pid=5715 comm=syz.3.572) [ 96.577567][ T5702] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 96.609129][ T5714] attempt to access beyond end of device [ 96.609129][ T5714] loop0: rw=2049, want=5780, limit=1024 [ 96.692628][ T5714] Buffer I/O error on dev loop0, logical block 2889, lost async page write [ 96.819958][ T5691] loop2: detected capacity change from 0 to 32768 [ 96.865876][ T5691] XFS: ikeep mount option is deprecated. [ 96.923936][ T5691] XFS: ikeep mount option is deprecated. [ 97.008498][ T5691] XFS (loop2): Mounting V5 Filesystem [ 97.151796][ T5741] netlink: 'syz.0.577': attribute type 2 has an invalid length. [ 97.240446][ T5724] loop4: detected capacity change from 0 to 32768 [ 97.270890][ T5724] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.575 (5724) [ 97.315597][ T5724] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 97.320203][ T5691] XFS (loop2): Ending clean mount [ 97.333845][ T5724] BTRFS info (device loop4): force clearing of disk cache [ 97.356672][ T5691] XFS (loop2): Quotacheck needed: Please wait. [ 97.360826][ T5724] BTRFS info (device loop4): enabling auto defrag [ 97.385648][ T5724] BTRFS info (device loop4): max_inline at 0 [ 97.400848][ T1112] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 97.404227][ T5748] loop3: detected capacity change from 0 to 8192 [ 97.423691][ T5724] BTRFS info (device loop4): enabling disk space caching [ 97.441338][ T5724] BTRFS info (device loop4): disk space caching is enabled [ 97.459399][ T5724] BTRFS info (device loop4): has skinny extents [ 97.466669][ T5691] XFS (loop2): Quotacheck: Done. [ 97.511666][ T5748] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 97.539195][ T5748] REISERFS (device loop3): using ordered data mode [ 97.584417][ T5748] reiserfs: using flush barriers [ 97.603887][ T5748] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.641419][ T5748] REISERFS (device loop3): checking transaction log (loop3) [ 97.674601][ T4183] XFS (loop2): Unmounting Filesystem [ 97.769820][ T5748] REISERFS (device loop3): Using rupasov hash to sort names [ 97.781923][ T1112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.796802][ T5748] REISERFS (device loop3): using 3.5.x disk format [ 97.803939][ T1112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 97.821694][ T5748] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 97.833691][ T1112] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 97.844303][ T5724] BTRFS info (device loop4): enabling ssd optimizations [ 97.847079][ T5748] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 97.864837][ T1112] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 97.865134][ T5724] BTRFS info (device loop4): clearing free space tree [ 97.874191][ T5748] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 97.892075][ T1112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.906802][ T5724] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 97.907824][ T1112] usb 2-1: config 0 descriptor?? [ 97.917081][ T5748] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 97.941156][ T5746] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.948521][ T5748] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 97.957862][ T5724] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 98.281912][ T485] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 98.300295][ T5787] loop3: detected capacity change from 0 to 1764 [ 98.422447][ T1112] aureal 0003:0755:2626.0009: unknown main item tag 0x6 [ 98.441216][ T1112] aureal 0003:0755:2626.0009: report_id 0 is invalid [ 98.454043][ T1112] aureal 0003:0755:2626.0009: item 0 2 1 8 parsing failed [ 98.474432][ T1112] aureal: probe of 0003:0755:2626.0009 failed with error -22 [ 98.600997][ T4963] vhci_hcd: vhci_device speed not set [ 98.610431][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 98.776088][ T23] usb 2-1: USB disconnect, device number 5 [ 98.907478][ T5822] loop2: detected capacity change from 0 to 1024 [ 99.157590][ T5822] attempt to access beyond end of device [ 99.157590][ T5822] loop2: rw=2049, want=5780, limit=1024 [ 99.169436][ T5822] Buffer I/O error on dev loop2, logical block 2889, lost async page write [ 99.218920][ T5840] loop4: detected capacity change from 0 to 128 [ 99.276865][ T5840] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 99.310873][ T4243] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.329121][ T5840] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.340932][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 99.456717][ T5850] loop2: detected capacity change from 0 to 256 [ 99.457292][ T5848] loop1: detected capacity change from 0 to 256 [ 99.484899][ T5850] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 99.542815][ T5848] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 99.590819][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 99.673886][ T5852] loop4: detected capacity change from 0 to 8192 [ 99.691065][ T4243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.711300][ T23] usb 4-1: config 0 has an invalid interface number: 92 but max is 0 [ 99.719739][ T4243] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 99.734676][ T23] usb 4-1: config 0 has no interface number 0 [ 99.756965][ T5852] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.765081][ T5858] loop1: detected capacity change from 0 to 512 [ 99.781819][ T4243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.814834][ T4243] usb 1-1: config 0 descriptor?? [ 99.901142][ T23] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=81.44 [ 99.915748][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.936942][ T5858] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 99.954936][ T23] usb 4-1: Product: syz [ 99.961640][ T23] usb 4-1: Manufacturer: syz [ 99.976564][ T5858] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.000887][ T23] usb 4-1: SerialNumber: syz [ 100.038777][ T23] usb 4-1: config 0 descriptor?? [ 100.310040][ T4967] usb 4-1: USB disconnect, device number 8 [ 100.320575][ T4243] magicmouse 0003:05AC:0265.000A: hidraw0: USB HID v0.08 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 100.525976][ T4243] usb 1-1: USB disconnect, device number 5 [ 101.234841][ T5906] netlink: 'syz.3.643': attribute type 5 has an invalid length. [ 101.240107][ T5907] loop1: detected capacity change from 0 to 1024 [ 101.276675][ T5906] device ip6erspan0 entered promiscuous mode [ 101.280175][ T5911] loop0: detected capacity change from 0 to 2048 [ 101.341450][ T5911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.402283][ T5907] attempt to access beyond end of device [ 101.402283][ T5907] loop1: rw=2049, want=5780, limit=1024 [ 101.448625][ T5907] Buffer I/O error on dev loop1, logical block 2889, lost async page write [ 101.794235][ T5940] loop2: detected capacity change from 0 to 24 [ 101.850555][ T5944] loop0: detected capacity change from 0 to 256 [ 101.920537][ T5944] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 102.094179][ T26] audit: type=1326 audit(1753772031.745:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f2199a9 code=0x7fc00000 [ 102.159651][ T26] audit: type=1326 audit(1753772031.775:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f2199a9 code=0x7fc00000 [ 102.231116][ T5961] loop2: detected capacity change from 0 to 1764 [ 102.238647][ T26] audit: type=1326 audit(1753772031.775:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f2199a9 code=0x7fc00000 [ 102.265913][ T26] audit: type=1326 audit(1753772031.775:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f2199a9 code=0x7fc00000 [ 102.289917][ T26] audit: type=1326 audit(1753772031.775:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f2199a9 code=0x7fc00000 [ 102.306536][ T5970] device ip6gretap1 entered promiscuous mode [ 102.317183][ T26] audit: type=1326 audit(1753772031.775:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f2199a9 code=0x7fc00000 [ 102.340924][ T4963] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.382566][ T26] audit: type=1326 audit(1753772031.775:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f2199a9 code=0x7fc00000 [ 102.409088][ T26] audit: type=1326 audit(1753772031.775:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f2199a9 code=0x7fc00000 [ 102.435165][ T26] audit: type=1326 audit(1753772031.775:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f2199a9 code=0x7fc00000 [ 102.457756][ T26] audit: type=1326 audit(1753772031.775:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f2199a9 code=0x7fc00000 [ 102.465828][ T5972] loop0: detected capacity change from 0 to 16 [ 102.522846][ T5972] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 102.721765][ T5984] netlink: 132 bytes leftover after parsing attributes in process `syz.3.679'. [ 102.741972][ T4963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.780249][ T4963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.806410][ T4963] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 102.821663][ T4963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.872687][ T4963] usb 2-1: config 0 descriptor?? [ 103.140361][ T6000] loop2: detected capacity change from 0 to 256 [ 103.349545][ T6002] loop0: detected capacity change from 0 to 4096 [ 103.367946][ T4963] greenasia 0003:0E8F:0012.000B: ignoring exceeding usage max [ 103.420367][ T4963] greenasia 0003:0E8F:0012.000B: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0 [ 103.448302][ T6002] ntfs: volume version 3.1. [ 103.487468][ T4963] greenasia 0003:0E8F:0012.000B: no inputs found [ 103.590850][ T4963] usb 2-1: USB disconnect, device number 6 [ 103.676029][ T6010] loop0: detected capacity change from 0 to 2048 [ 103.697588][ T6007] fido_id[6007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 103.751979][ T6010] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 103.806864][ T6010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.943103][ T5990] loop3: detected capacity change from 0 to 32768 [ 104.064699][ T5990] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 104.116660][ T5990] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 104.171084][ T5990] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 104.354211][ T6031] loop1: detected capacity change from 0 to 128 [ 104.393776][ T5990] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 104.425987][ T6031] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 104.451684][ T6034] ptrace attach of "./syz-executor exec"[4183] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ ÿÿÿÿ â÷%-ì‹5鎢Ÿ£D|VTyÊÞ\x22ýÍšK«à­N/)éõº/éÙH¯Mú&‚¡CsnVkת{Jv1±Á%­èÈ_)Þ$n»:…,þ\x5c¿]n¯+]±2yrŒrîLË•ß-6·^%D³\x5c~Õzèw'Mc\x22o§â–½‹ÄÙ«·`¿Ë¤=s N¾8|?Þ”Ò¡¿øÅBr›ô9šÎɳbõÝFøü…{iÄ$œ]ûë• [ 104.483497][ T6031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.649079][ T6037] loop2: detected capacity change from 0 to 4096 [ 104.829102][ T6037] ntfs: volume version 3.1. [ 104.839662][ T6039] loop0: detected capacity change from 0 to 4096 [ 104.926289][ T6039] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 105.204494][ T6051] netlink: 108 bytes leftover after parsing attributes in process `syz.1.711'. [ 105.267015][ T6051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.711'. [ 105.484934][ T6061] loop4: detected capacity change from 0 to 4096 [ 105.598555][ T6069] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.673019][ T6061] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 105.722481][ T6061] Remounting filesystem read-only [ 105.811798][ T6068] loop1: detected capacity change from 0 to 4096 [ 105.853177][ T6068] ntfs3: loop1: ino=3, Correct links count -> 2. [ 105.939802][ T6074] loop2: detected capacity change from 0 to 4096 [ 105.995794][ T6074] ntfs3: loop2: ino=3, Correct links count -> 2. [ 106.039821][ T6068] ntfs3: loop1: failed to convert "0080" to maccyrillic [ 106.116914][ T6068] ntfs3: loop1: failed to convert name for inode 1e. [ 106.144333][ T6082] loop4: detected capacity change from 0 to 8 [ 106.227285][ T6074] ntfs3: loop2: failed to convert "0080" to macgreek [ 106.245902][ T6084] loop0: detected capacity change from 0 to 1024 [ 106.268517][ T6074] ntfs3: loop2: failed to convert name for inode 1e. [ 106.320537][ T6086] program syz.3.728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.433964][ T6084] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.847105][ T6124] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 106.876509][ T6124] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 106.906896][ T6124] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 106.915079][ T6121] loop2: detected capacity change from 0 to 2048 [ 106.944159][ T6124] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 107.007318][ T6124] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 107.031883][ T6124] comedi comedi3: 8255: I/O port conflict (0x100010,4) [ 107.044092][ T6136] program syz.0.749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.069138][ T6124] comedi comedi3: 8255: I/O port conflict (0x1000002,4) [ 107.080176][ T6121] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27742, location=27742 [ 107.107712][ T6124] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 107.147205][ T6124] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 107.188447][ T6124] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 107.220434][ T6124] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 107.247761][ T6124] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 107.266160][ T6148] IPv6: syztnl0: Disabled Multicast RS [ 107.288871][ T6124] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 107.327547][ T6124] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 107.379411][ T6124] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 107.410355][ T6124] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 107.429139][ T6124] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 107.441814][ T6124] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 107.481494][ T6124] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 107.481532][ T6124] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 107.481563][ T6124] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 107.481593][ T6124] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 107.481686][ T6124] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 107.481716][ T6124] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 107.607406][ T6164] netem: change failed [ 107.776663][ T6174] loop4: detected capacity change from 0 to 16 [ 107.804857][ T6176] loop1: detected capacity change from 0 to 1024 [ 107.820166][ T6174] erofs: (device loop4): mounted with root inode @ nid 36. [ 107.882903][ T6176] hfsplus: small dir entry [ 107.924482][ T6184] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.773'. [ 107.930440][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 107.959332][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 107.986977][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 107.997364][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 311295 of nid 36 [ 108.016184][ T6186] loop3: detected capacity change from 0 to 2048 [ 108.044143][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 108.056043][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 108.071755][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 108.083111][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 108.099344][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 108.112849][ T6192] netlink: 'syz.1.777': attribute type 27 has an invalid length. [ 108.121613][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 66 @ nid 36 [ 108.141372][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 108.142326][ T6186] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.157878][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 108.171733][ T5816] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 108.183688][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 108.193626][ T6174] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 108.203371][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 108.214618][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 253951 of nid 36 [ 108.214645][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 108.214661][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 249855 of nid 36 [ 108.214678][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 108.214694][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 245759 of nid 36 [ 108.214710][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 108.214726][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 241663 of nid 36 [ 108.214742][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 108.214758][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 108.214773][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 233471 of nid 36 [ 108.214790][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 108.214814][ T6174] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 54 of nid 36 [ 108.214830][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 108.214846][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 225279 of nid 36 [ 108.214863][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 108.214879][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 108.214894][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 108.214910][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 108.214926][ T6174] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 108.214940][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 108.214956][ T6174] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 47 of nid 36 [ 108.214973][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 108.214989][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 108.215005][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 108.215022][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 108.215037][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 108.215057][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 108.215076][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 108.215091][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 180223 of nid 36 [ 108.215108][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 108.215123][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 176127 of nid 36 [ 108.215139][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 108.215154][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 172031 of nid 36 [ 108.215171][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 108.215187][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 167935 of nid 36 [ 108.215204][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 108.215219][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 108.215235][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 159743 of nid 36 [ 108.215253][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 108.215280][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 108.215295][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 147455 of nid 36 [ 108.215311][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 35 @ nid 36 [ 108.215327][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 143359 of nid 36 [ 108.215343][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 108.215444][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 28 @ nid 36 [ 108.215460][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 114687 of nid 36 [ 108.215476][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 108.215493][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 108.215508][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 108.215524][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 102399 of nid 36 [ 108.215541][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 108.215674][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 108.215690][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 108.215716][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 108.600247][ T6199] loop0: detected capacity change from 0 to 512 [ 108.606552][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 108.674084][ T6199] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.678308][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 108.748071][ T6199] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, [ 108.751024][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 11 @ nid 36 [ 108.760106][ T6199] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 108.767851][ T6174] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 108.797461][ T6199] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 108.810859][ T6199] EXT4-fs (loop0): 1 truncate cleaned up [ 108.810883][ T6199] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 108.869090][ T6199] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 108.869832][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 108.869985][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 108.870003][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 5 @ nid 36 [ 108.870021][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 108.870077][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 36 [ 108.870095][ T6174] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 108.870152][ T6174] attempt to access beyond end of device [ 108.870152][ T6174] loop4: rw=524288, want=1049280, limit=16 [ 108.870231][ T6174] attempt to access beyond end of device [ 108.870231][ T6174] loop4: rw=524288, want=6536, limit=16 [ 108.870284][ T6174] attempt to access beyond end of device [ 108.870284][ T6174] loop4: rw=524288, want=34359736344, limit=16 [ 108.870348][ T6174] attempt to access beyond end of device [ 108.870348][ T6174] loop4: rw=524288, want=736, limit=16 [ 108.870402][ T6174] attempt to access beyond end of device [ 108.870402][ T6174] loop4: rw=524288, want=536576872, limit=16 [ 108.870474][ T6174] attempt to access beyond end of device [ 108.870474][ T6174] loop4: rw=524288, want=13478624040, limit=16 [ 108.870537][ T6174] attempt to access beyond end of device [ 108.870537][ T6174] loop4: rw=524288, want=790400, limit=16 [ 108.870602][ T6174] attempt to access beyond end of device [ 108.870602][ T6174] loop4: rw=524288, want=88, limit=16 [ 108.870652][ T6174] attempt to access beyond end of device [ 108.870652][ T6174] loop4: rw=524288, want=1183616, limit=16 [ 108.870714][ T6174] attempt to access beyond end of device [ 108.870714][ T6174] loop4: rw=524288, want=312, limit=16 [ 108.921074][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.921106][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.921138][ T5816] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 108.921160][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.922848][ T5816] usb 3-1: config 0 descriptor?? [ 109.017573][ T4184] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /182/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 109.052681][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 109.083467][ T4184] EXT4-fs error (device loop0): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 109.135109][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 109.172606][ T4184] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 109.232475][ T6210] loop3: detected capacity change from 0 to 4096 [ 109.250606][ T4184] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /182/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 109.289947][ T4184] EXT4-fs error (device loop0): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 109.296058][ T6210] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 109.414350][ T4184] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 109.424150][ T5816] uclogic 0003:2179:0077.000C: No inputs registered, leaving [ 109.471277][ T5816] uclogic 0003:2179:0077.000C: hidraw0: USB HID v3.0e Device [HID 2179:0077] on usb-dummy_hcd.2-1/input0 [ 109.505556][ T4184] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /182/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 109.556198][ T6224] netlink: 'syz.4.792': attribute type 5 has an invalid length. [ 109.574085][ T6226] loop1: detected capacity change from 0 to 16 [ 109.611979][ T4184] EXT4-fs error (device loop0): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 109.625286][ T5816] usb 3-1: USB disconnect, device number 6 [ 109.655392][ T6226] erofs: (device loop1): mounted with root inode @ nid 36. [ 109.681404][ T4184] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 109.695539][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 109.751003][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 109.786947][ T4184] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /182/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 109.792466][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 109.890882][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 311295 of nid 36 [ 109.912437][ T6231] fido_id[6231]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 109.931355][ T4184] EXT4-fs error (device loop0): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 109.960960][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 109.980068][ T4184] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 109.994800][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 109.994826][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 109.994855][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 110.002172][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 110.049881][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 66 @ nid 36 [ 110.064439][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 110.064654][ T4184] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /182/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 110.074893][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 110.115033][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 110.130217][ T6226] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 110.153721][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 110.186963][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 253951 of nid 36 [ 110.201078][ T4184] EXT4-fs error (device loop0): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 110.227161][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 110.239855][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 249855 of nid 36 [ 110.268743][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 110.284176][ T4184] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 110.288797][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 245759 of nid 36 [ 110.335038][ T4184] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 110.340155][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 110.379616][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 241663 of nid 36 [ 110.399917][ T4184] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 110.401425][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 110.462056][ T4184] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 110.495422][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 110.507146][ T4184] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 110.540121][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 233471 of nid 36 [ 110.562082][ T4184] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 110.621202][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 110.647439][ T6226] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 54 of nid 36 [ 110.674495][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 110.699823][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 225279 of nid 36 [ 110.704339][ T6239] loop3: detected capacity change from 0 to 32768 [ 110.736489][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 110.778047][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 110.791471][ T6239] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.799 (6239) [ 110.838953][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 110.876250][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 110.887780][ T6239] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 110.920902][ T6239] BTRFS info (device loop3): enabling disk space caching [ 110.927980][ T6239] BTRFS info (device loop3): enabling auto defrag [ 110.935158][ T6226] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 110.961032][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 110.970891][ T6226] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 47 of nid 36 [ 111.000815][ T6239] BTRFS info (device loop3): use zlib compression, level 3 [ 111.031091][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 111.041189][ T6239] BTRFS info (device loop3): force clearing of disk cache [ 111.048406][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 111.057931][ T6239] BTRFS info (device loop3): disabling disk space caching [ 111.080911][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 111.093529][ T6239] BTRFS info (device loop3): has skinny extents [ 111.118636][ T6245] loop2: detected capacity change from 0 to 32768 [ 111.126385][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 111.138725][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 111.147718][ T6248] loop4: detected capacity change from 0 to 32768 [ 111.161000][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 111.170065][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 111.197352][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 180223 of nid 36 [ 111.215658][ T6245] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.800 (6245) [ 111.271881][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 111.323742][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 176127 of nid 36 [ 111.341868][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 111.348478][ T6245] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 111.366603][ T6248] XFS (loop4): Mounting V5 Filesystem [ 111.369025][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 172031 of nid 36 [ 111.382963][ T6245] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 111.410825][ T6245] BTRFS info (device loop2): use zstd compression, level 3 [ 111.425425][ T6245] BTRFS info (device loop2): using free space tree [ 111.432368][ T6245] BTRFS info (device loop2): has skinny extents [ 111.444470][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 111.456039][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 167935 of nid 36 [ 111.466476][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 111.476121][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 111.486659][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 159743 of nid 36 [ 111.498187][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 111.498550][ T6248] XFS (loop4): Ending clean mount [ 111.507295][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 111.507318][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 147455 of nid 36 [ 111.507335][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 35 @ nid 36 [ 111.507348][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 143359 of nid 36 [ 111.507363][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 111.507465][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 28 @ nid 36 [ 111.507479][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 114687 of nid 36 [ 111.611411][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 111.621120][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 111.630256][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 111.639563][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 102399 of nid 36 [ 111.650969][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 111.658484][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.660277][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 111.723796][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 111.733480][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 111.743215][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 111.754566][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 111.764534][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 11 @ nid 36 [ 111.774387][ T6226] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 111.786096][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 111.795413][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 111.807018][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 36 [ 111.816153][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 111.825189][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 36 [ 111.834327][ T6226] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 111.845956][ T4191] XFS (loop4): Unmounting Filesystem [ 111.857760][ T6239] BTRFS info (device loop3): enabling ssd optimizations [ 111.922055][ T6245] BTRFS info (device loop2): enabling ssd optimizations [ 111.968183][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.361939][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.813517][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.166829][ T6323] loop1: detected capacity change from 0 to 32768 [ 113.193341][ T6323] XFS: attr2 mount option is deprecated. [ 113.321346][ T4253] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 113.331541][ T6323] XFS (loop1): Mounting V5 Filesystem [ 113.527156][ T6323] XFS (loop1): Ending clean mount [ 113.547733][ T6323] XFS (loop1): Quotacheck needed: Please wait. [ 113.626432][ T6325] chnl_net:caif_netlink_parms(): no params data found [ 113.644802][ T6323] XFS (loop1): Quotacheck: Done. [ 113.711201][ T4253] usb 5-1: config 54 has an invalid interface number: 154 but max is 0 [ 113.720836][ T4253] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 113.739045][ T6342] loop2: detected capacity change from 0 to 32768 [ 113.750981][ T5816] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 113.758999][ T4253] usb 5-1: config 54 has no interface number 0 [ 113.770968][ T4253] usb 5-1: config 54 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 113.784575][ T6342] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.812 (6342) [ 113.787967][ T4253] usb 5-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.826620][ T4182] XFS (loop1): Unmounting Filesystem [ 113.885391][ T6342] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 113.895368][ T6342] BTRFS info (device loop2): using free space tree [ 113.902945][ T6342] BTRFS info (device loop2): has skinny extents [ 113.922508][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.943176][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.974593][ T6325] device bridge_slave_0 entered promiscuous mode [ 114.000999][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 114.011042][ T4253] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 114.026613][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.030348][ T4253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.042030][ T4253] usb 5-1: Product: syz [ 114.043651][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.046398][ T4253] usb 5-1: Manufacturer: syz [ 114.058577][ T4253] usb 5-1: SerialNumber: syz [ 114.087566][ T6325] device bridge_slave_1 entered promiscuous mode [ 114.121697][ T5816] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 114.136982][ T5816] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.144404][ T5816] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 114.154916][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.165617][ T5816] usb 4-1: config 0 descriptor?? [ 114.249203][ T6342] BTRFS info (device loop2): enabling ssd optimizations [ 114.258616][ T6325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.270308][ T6325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.383876][ T26] kauditd_printk_skb: 3293 callbacks suppressed [ 114.383890][ T26] audit: type=1800 audit(1753772044.045:3295): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.812" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 114.443972][ T6325] team0: Port device team_slave_0 added [ 114.452554][ T4253] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 114.481026][ T9] usb 5-1: Failed to submit usb control message: -71 [ 114.493597][ T4253] usb 5-1: USB disconnect, device number 6 [ 114.497393][ T9] usb 5-1: unable to send the bmi data to the device: -71 [ 114.539002][ T6325] team0: Port device team_slave_1 added [ 114.572698][ T9] usb 5-1: unable to get target info from device [ 114.579129][ T9] usb 5-1: could not get target info (-71) [ 114.639833][ T9] usb 5-1: could not probe fw (-71) [ 114.650263][ T5816] elecom 0003:056E:010D.000D: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.3-1/input0 [ 114.831450][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 114.864711][ T5801] usb 4-1: USB disconnect, device number 9 [ 114.944968][ T6413] fido_id[6413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 115.007101][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.018487][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.086218][ T6425] loop4: detected capacity change from 0 to 2048 [ 115.114994][ T6428] loop2: detected capacity change from 0 to 512 [ 115.151280][ T6325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.171345][ T6425] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.208298][ T6425] NILFS (loop4): mounting unchecked fs [ 115.224021][ T6428] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.240571][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.255018][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.269345][ T6425] NILFS (loop4): recovery complete [ 115.320568][ T6325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.344867][ T6434] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.370650][ T6428] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.822: bad orphan inode 16 [ 115.394922][ T6428] ext4_test_bit(bit=15, block=4) = 0 [ 115.400490][ T6428] EXT4-fs (loop2): 1 orphan inode deleted [ 115.445261][ T6428] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,acl,stripe=0x0000000000000001,init_itable=0x0000000000000008,journal_dev=0x000000007ffffffe,bsdgroups,,errors=continue. Quota mode: none. [ 115.571375][ T6325] device hsr_slave_0 entered promiscuous mode [ 115.600357][ T6325] device hsr_slave_1 entered promiscuous mode [ 115.610433][ T6325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.620585][ T6325] Cannot create hsr debugfs directory [ 115.713726][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 115.748809][ T144] IPVS: stopping backup sync thread 5455 ... [ 115.820668][ T6452] loop2: detected capacity change from 0 to 1024 [ 115.848694][ T6454] loop4: detected capacity change from 0 to 128 [ 115.863310][ T5816] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 115.891505][ T6452] EXT4-fs (loop2): Ignoring removed nobh option [ 115.951800][ T6452] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.833: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 115.971376][ T6454] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.982052][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 115.993456][ T6454] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.005640][ T6452] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.833: couldn't read orphan inode 11 (err -117) [ 116.091120][ T6452] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 116.138665][ T7] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.147352][ T6325] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.167462][ T6452] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.833: Invalid block bitmap block 0 in block_group 0 [ 116.181292][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.181331][ T7] usb 2-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 116.181352][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.193445][ T7] usb 2-1: config 0 descriptor?? [ 116.264120][ T6452] Quota error (device loop2): write_blk: dquota write failed [ 116.272543][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.290575][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.300485][ T6452] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 116.321716][ T5816] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 116.327666][ T6452] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.833: Failed to acquire dquot type 0 [ 116.341693][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.370207][ T5816] usb 4-1: config 0 descriptor?? [ 116.400933][ T6325] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.417530][ T6325] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.439572][ T6325] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.560903][ T144] device hsr_slave_0 left promiscuous mode [ 116.580490][ T144] device hsr_slave_1 left promiscuous mode [ 116.605122][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.606207][ T6482] loop2: detected capacity change from 0 to 512 [ 116.621190][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.636234][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.648983][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.658298][ T144] device bridge_slave_1 left promiscuous mode [ 116.675728][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.694797][ T144] device bridge_slave_0 left promiscuous mode [ 116.701225][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.740503][ T144] device veth1_macvtap left promiscuous mode [ 116.742743][ T7] asus 0003:0B05:1822.000E: unknown main item tag 0x0 [ 116.748823][ T144] device veth0_macvtap left promiscuous mode [ 116.760722][ T144] device veth1_vlan left promiscuous mode [ 116.769443][ T144] device veth0_vlan left promiscuous mode [ 116.773051][ T6482] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 116.784049][ T7] asus 0003:0B05:1822.000E: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.1-1/input0 [ 116.797490][ T6482] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 116.805719][ T7] asus 0003:0B05:1822.000E: Asus input not registered [ 116.813011][ T6482] System zones: 0-1, 15-15, 18-18, 34-34 [ 116.820087][ T7] asus: probe of 0003:0B05:1822.000E failed with error -12 [ 116.828506][ T6482] EXT4-fs (loop2): orphan cleanup on readonly fs [ 116.840161][ T6482] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 116.851001][ T6482] EXT4-fs warning (device loop2): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 116.866204][ T6482] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 116.875713][ T5816] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 116.888055][ T6482] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.839: bg 0: block 40: padding at end of block bitmap is not set [ 116.902524][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 116.910885][ T6482] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 116.928669][ T6482] EXT4-fs (loop2): 1 truncate cleaned up [ 116.934625][ T6482] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.006750][ T6482] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 117.025916][ T5811] usb 2-1: USB disconnect, device number 7 [ 117.091164][ T5816] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 117.098588][ T5816] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 117.142182][ T5816] pyra: probe of 0003:1E7D:2CF6.000F failed with error -71 [ 117.167525][ T5816] usb 4-1: USB disconnect, device number 10 [ 117.286434][ T6489] fido_id[6489]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 117.435239][ T144] team0 (unregistering): Port device team_slave_1 removed [ 117.450625][ T144] team0 (unregistering): Port device team_slave_0 removed [ 117.468060][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.486011][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.665947][ T144] bond0 (unregistering): Released all slaves [ 117.716299][ T6495] loop2: detected capacity change from 0 to 40427 [ 117.747653][ T6495] F2FS-fs (loop2): invalid crc value [ 117.794101][ T6495] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.001623][ T6495] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 118.037056][ T6514] loop1: detected capacity change from 0 to 1024 [ 118.111815][ T6514] EXT4-fs (loop1): Ignoring removed nobh option [ 118.130577][ T6325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.175604][ T6495] F2FS-fs (loop2): Corrupted max_depth of 3: 4294967295 [ 118.196285][ T6525] loop3: detected capacity change from 0 to 512 [ 118.225891][ T6325] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.236977][ T6514] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.847: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 118.346802][ T6525] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.361223][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.368884][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.401156][ T6514] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.847: couldn't read orphan inode 11 (err -117) [ 118.500719][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.509916][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.519448][ T6514] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 118.530002][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.545708][ T4280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.646628][ T6514] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.847: Invalid block bitmap block 0 in block_group 0 [ 118.650057][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.673161][ T6514] Quota error (device loop1): write_blk: dquota write failed [ 118.727599][ T6514] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 118.761455][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.770407][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.777544][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.801452][ T6514] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.847: Failed to acquire dquot type 0 [ 118.817708][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.844453][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.919807][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.930504][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.993820][ T1109] Bluetooth: hci2: command 0x040f tx timeout [ 118.996865][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.044931][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.080227][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.129803][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.161552][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.191644][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.218327][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.229649][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.258260][ T6551] netlink: 'syz.1.857': attribute type 30 has an invalid length. [ 119.275801][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.584826][ T6541] loop4: detected capacity change from 0 to 32768 [ 119.692081][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.699605][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.729618][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.730495][ T6571] loop2: detected capacity change from 0 to 1024 [ 119.785503][ T6571] hfsplus: request for non-existent node 3 in B*Tree [ 119.807354][ T6571] hfsplus: request for non-existent node 3 in B*Tree [ 119.857415][ T6541] XFS (loop4): Mounting V5 Filesystem [ 119.909413][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 120.021026][ T4966] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 120.144764][ T6598] loop2: detected capacity change from 0 to 8 [ 120.160019][ T6541] XFS (loop4): Ending clean mount [ 120.186406][ T6598] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 120.291073][ T4966] usb 4-1: Using ep0 maxpacket: 16 [ 120.344035][ T4191] XFS (loop4): Unmounting Filesystem [ 120.502628][ T6610] loop1: detected capacity change from 0 to 512 [ 120.552749][ T6325] device veth0_vlan entered promiscuous mode [ 120.559562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.589011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.617764][ T4966] usb 4-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 120.627701][ T6610] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 120.637927][ T4966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.637953][ T4966] usb 4-1: Product: syz [ 120.637966][ T4966] usb 4-1: Manufacturer: syz [ 120.637978][ T4966] usb 4-1: SerialNumber: syz [ 120.639412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.668954][ T4966] usb 4-1: config 0 descriptor?? [ 120.722004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.730445][ T6610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e11c, mo2=0102] [ 120.743284][ T6610] System zones: 1-12 [ 120.749964][ T6325] device veth1_vlan entered promiscuous mode [ 120.757541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.766836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.775365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.794277][ T6610] EXT4-fs (loop1): orphan cleanup on readonly fs [ 120.797893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.809780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.818492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.829887][ T6325] device veth0_macvtap entered promiscuous mode [ 120.838914][ T6610] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.868: invalid indirect mapped block 12 (level 1) [ 120.843537][ T6325] device veth1_macvtap entered promiscuous mode [ 120.881040][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.896670][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.927255][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.950822][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.962067][ T4966] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 120.970866][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.980832][ T6610] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.868: invalid indirect mapped block 2 (level 2) [ 121.001252][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.001645][ T4966] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22 [ 121.040809][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.049319][ T6610] EXT4-fs (loop1): 1 truncate cleaned up [ 121.061279][ T5816] Bluetooth: hci2: command 0x0419 tx timeout [ 121.065215][ T6610] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,debug,abort,errors=continue. Quota mode: none. [ 121.100830][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.104735][ T4966] usb 4-1: USB disconnect, device number 11 [ 121.144129][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.189461][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.202193][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.255775][ T6621] loop4: detected capacity change from 0 to 1024 [ 121.267491][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.286797][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.327283][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.351593][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.352939][ T6604] loop2: detected capacity change from 0 to 32768 [ 121.378165][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.402988][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.422662][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.456876][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.490868][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.513726][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.547555][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.570109][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.593507][ T6621] EXT4-fs (loop4): Ignoring removed nobh option [ 121.617370][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.650024][ T6621] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.866: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 121.692667][ T6325] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.698103][ T6621] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.866: couldn't read orphan inode 11 (err -117) [ 121.719204][ T6621] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 121.738801][ T6325] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.757602][ T6621] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.866: Invalid block bitmap block 0 in block_group 0 [ 121.761510][ T6604] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 121.831151][ T6325] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.839867][ T6325] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.881356][ T6621] Quota error (device loop4): write_blk: dquota write failed [ 121.890826][ T6621] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 121.906791][ T6621] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.866: Failed to acquire dquot type 0 [ 121.931045][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 122.120581][ T4853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.200778][ T4853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.249682][ T452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.265797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.275690][ T452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.322040][ T6644] netlink: 'syz.3.872': attribute type 10 has an invalid length. [ 122.331941][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.346844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.511329][ T7] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 122.530866][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.546629][ T4183] ocfs2: Unmounting device (7,2) on (node local) [ 122.570770][ T7] usb 2-1: Product: syz [ 122.603633][ T7] usb 2-1: Manufacturer: syz [ 122.635309][ T7] usb 2-1: SerialNumber: syz [ 122.667073][ T7] usb 2-1: config 0 descriptor?? [ 122.732867][ T7] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 122.757348][ T7] ims_pcu: probe of 2-1:0.0 failed with error -22 [ 122.847805][ T6665] loop5: detected capacity change from 0 to 8 [ 122.955012][ T7] usb 2-1: USB disconnect, device number 8 [ 123.152825][ T5801] Bluetooth: hci2: command 0x0411 tx timeout [ 123.677269][ T5801] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 124.156679][ T5801] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 124.183461][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.238411][ T5801] usb 5-1: config 0 descriptor?? [ 124.307918][ T5801] gspca_main: spca508-2.14.0 probing 8086:0110 [ 124.323528][ T6727] nbd: couldn't find device at index 956301312 [ 124.528541][ T5801] gspca_spca508: reg_read err -32 [ 124.729826][ T6714] loop1: detected capacity change from 0 to 32768 [ 124.819907][ T5801] gspca_spca508: reg_read err -71 [ 124.846479][ T6748] loop2: detected capacity change from 0 to 128 [ 124.855598][ T5801] gspca_spca508: reg_read err -71 [ 124.877083][ T6711] loop3: detected capacity change from 0 to 32768 [ 124.888241][ T5801] gspca_spca508: reg_read err -71 [ 124.923114][ T5801] gspca_spca508: reg write: error -71 [ 124.929131][ T5801] spca508: probe of 5-1:0.0 failed with error -71 [ 124.974304][ T6711] XFS: attr2 mount option is deprecated. [ 124.993907][ T6748] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 125.001967][ T5801] usb 5-1: USB disconnect, device number 7 [ 125.019097][ T6748] System zones: 1-3, 19-19, 35-36 [ 125.020580][ T6760] program syz.5.909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.040702][ T6748] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 125.073211][ T6748] ext4 filesystem being mounted at /196/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.122053][ T6765] loop5: detected capacity change from 0 to 256 [ 125.143835][ T6711] XFS (loop3): Mounting V5 Filesystem [ 125.172851][ T6765] exfat: Deprecated parameter 'utf8' [ 125.178241][ T6765] exfat: Deprecated parameter 'namecase' [ 125.291939][ T6765] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 125.319609][ T6773] loop2: detected capacity change from 0 to 4096 [ 125.366499][ T6773] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 125.424996][ T6711] XFS (loop3): Ending clean mount [ 125.444949][ T6711] XFS (loop3): Quotacheck needed: Please wait. [ 125.493034][ T6773] ntfs3: loop2: Failed to load $Extend. [ 125.561903][ T6711] XFS (loop3): Quotacheck: Done. [ 125.669224][ T4190] XFS (loop3): Unmounting Filesystem [ 125.980348][ T6714] XFS (loop1): Mounting V5 Filesystem [ 126.132314][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.920'. [ 126.160050][ T6714] XFS (loop1): Ending clean mount [ 126.342877][ T4182] XFS (loop1): Unmounting Filesystem [ 126.501682][ T6809] loop4: detected capacity change from 0 to 8 [ 126.616948][ T6809] fuse: Unexpected value for 'default_permissions' [ 127.212696][ T6826] loop1: detected capacity change from 0 to 4096 [ 127.264069][ T6828] syz.5.932 (6828) used obsolete PPPIOCDETACH ioctl [ 127.355930][ T6820] loop3: detected capacity change from 0 to 40427 [ 127.397467][ T6820] F2FS-fs (loop3): invalid crc value [ 127.451160][ T6820] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.508764][ T6820] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 127.552468][ T6820] F2FS-fs (loop3): Corrupted max_depth of 3: 4294967295 [ 128.087121][ T6846] loop3: detected capacity change from 0 to 1024 [ 128.135444][ T6826] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 128.139346][ T6846] hfsplus: request for non-existent node 3 in B*Tree [ 128.168193][ T6846] hfsplus: request for non-existent node 3 in B*Tree [ 128.230976][ T6826] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 128.261121][ T4253] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 128.270780][ T6826] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 128.294499][ T6826] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 128.317767][ T6826] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 128.350053][ T6848] loop3: detected capacity change from 0 to 64 [ 128.360568][ T6826] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 128.376378][ T6826] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 128.402758][ T6826] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 128.422357][ T6826] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 128.443734][ T6826] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 128.475904][ T6826] ntfs: volume version 3.1. [ 128.551077][ T4253] usb 5-1: Using ep0 maxpacket: 8 [ 128.881174][ T4253] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=81.ea [ 128.907894][ T4253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.961308][ T4253] usb 5-1: Product: syz [ 128.980365][ T4253] usb 5-1: Manufacturer: syz [ 128.996008][ T4253] usb 5-1: SerialNumber: syz [ 129.024974][ T4253] usb 5-1: config 0 descriptor?? [ 129.092423][ T5801] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 129.122342][ T4253] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 129.149034][ T4253] usb 5-1: setting power ON [ 129.166633][ T4253] dvb-usb: bulk message failed: -22 (2/0) [ 129.195852][ T4253] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.234101][ T4253] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 129.257354][ T4253] usb 5-1: media controller created [ 129.294236][ T4253] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.323994][ T6844] dvb-usb: bulk message failed: -22 (3/0) [ 129.336685][ T4253] usb 5-1: selecting invalid altsetting 6 [ 129.346725][ T4253] usb 5-1: digital interface selection failed (-22) [ 129.353899][ T4253] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 129.401165][ T4253] usb 5-1: setting power OFF [ 129.411215][ T4253] dvb-usb: bulk message failed: -22 (2/0) [ 129.417187][ T4253] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 129.431513][ T4253] (NULL device *): no alternate interface [ 129.468511][ T4253] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 129.494025][ T4253] usb 5-1: USB disconnect, device number 8 [ 129.667039][ T5801] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 129.676114][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.691174][ T5801] usb 4-1: Product: syz [ 129.695363][ T5801] usb 4-1: Manufacturer: syz [ 129.699957][ T5801] usb 4-1: SerialNumber: syz [ 129.723458][ T5801] usb 4-1: config 0 descriptor?? [ 129.766022][ T5801] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 129.796526][ T5801] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 129.829064][ T5801] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 130.079532][ T5810] usb 4-1: USB disconnect, device number 12 [ 130.087842][ T6873] netlink: 2724 bytes leftover after parsing attributes in process `syz.1.947'. [ 130.380948][ T4253] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.671081][ T4253] usb 3-1: Using ep0 maxpacket: 8 [ 130.800858][ T6881] loop1: detected capacity change from 0 to 32768 [ 130.811255][ T4253] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 62432, setting to 1024 [ 130.843043][ T4253] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 130.877856][ T4253] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 130.897475][ T4253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.921510][ T4253] usb 3-1: config 0 descriptor?? [ 130.941208][ T6872] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 130.961738][ T4253] hso 3-1:0.0: Can't find BULK OUT endpoint [ 131.165651][ T6881] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 131.227828][ T4235] usb 3-1: USB disconnect, device number 7 [ 131.428129][ T4182] ocfs2: Unmounting device (7,1) on (node local) [ 131.576916][ T6895] loop3: detected capacity change from 0 to 32768 [ 131.752222][ T6895] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 131.752222][ T6895] [ 131.800248][ T6895] ERROR: (device loop3): remounting filesystem as read-only [ 131.834516][ T6895] ialloc: diAlloc returned -5! [ 132.028490][ T6926] loop5: detected capacity change from 0 to 1024 [ 132.177142][ T6601] hfsplus: b-tree write err: -5, ino 4 [ 132.589394][ T6920] loop2: detected capacity change from 0 to 32768 [ 132.673464][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.679825][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.741505][ T6920] XFS: attr2 mount option is deprecated. [ 132.938513][ T6920] XFS (loop2): Mounting V5 Filesystem [ 133.241703][ T6920] XFS (loop2): Ending clean mount [ 133.271707][ T6920] XFS (loop2): Quotacheck needed: Please wait. [ 133.299313][ T6964] netlink: 16 bytes leftover after parsing attributes in process `syz.5.980'. [ 133.363130][ T5801] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 133.391482][ T6920] XFS (loop2): Quotacheck: Done. [ 133.400084][ T6932] loop3: detected capacity change from 0 to 32768 [ 133.568696][ T4183] XFS (loop2): Unmounting Filesystem [ 133.703332][ T5801] usb 5-1: Using ep0 maxpacket: 32 [ 133.855224][ T6981] CUSE: unknown device info "ÿ" [ 133.860494][ T6981] CUSE: zero length info key specified [ 133.866690][ T5801] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 133.876140][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.907337][ T5801] usb 5-1: config 0 descriptor?? [ 133.979805][ T5801] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 134.141133][ T6987] loop2: detected capacity change from 0 to 4096 [ 134.220431][ T6987] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 134.330598][ T4183] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 134.428573][ T6991] loop2: detected capacity change from 0 to 1024 [ 134.570487][ T154] hfsplus: b-tree write err: -5, ino 4 [ 134.585701][ T6989] loop5: detected capacity change from 0 to 40427 [ 134.651079][ T5801] gspca_nw80x: reg_w err -71 [ 134.655763][ T5801] nw80x: probe of 5-1:0.0 failed with error -71 [ 134.716814][ T5801] usb 5-1: USB disconnect, device number 9 [ 134.718124][ T6989] F2FS-fs (loop5): Found nat_bits in checkpoint [ 134.767288][ T6932] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 134.900855][ T6989] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 135.057801][ T4190] ocfs2: Unmounting device (7,3) on (node local) [ 135.095201][ T6325] handle_bad_sector: 16 callbacks suppressed [ 135.095219][ T6325] attempt to access beyond end of device [ 135.095219][ T6325] loop5: rw=2049, want=45104, limit=40427 [ 135.232079][ T7012] loop1: detected capacity change from 0 to 16 [ 135.537453][ T7024] loop3: detected capacity change from 0 to 512 [ 135.657342][ T7024] EXT4-fs (loop3): Ignoring removed nobh option [ 135.760445][ T6994] loop2: detected capacity change from 0 to 32768 [ 135.815487][ T6994] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.993 (6994) [ 135.828703][ T7024] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #3: comm syz.3.1000: corrupted inode contents [ 135.907157][ T6994] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 135.921092][ T7024] EXT4-fs error (device loop3): ext4_dirty_inode:6040: inode #3: comm syz.3.1000: mark_inode_dirty error [ 135.963308][ T6994] BTRFS info (device loop2): using free space tree [ 135.969855][ T6994] BTRFS info (device loop2): has skinny extents [ 136.015760][ T7024] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #3: comm syz.3.1000: corrupted inode contents [ 136.055998][ T7024] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.1000: mark_inode_dirty error [ 136.148117][ T7062] loop5: detected capacity change from 0 to 256 [ 136.167971][ T7024] __quota_error: 12 callbacks suppressed [ 136.167988][ T7024] Quota error (device loop3): write_blk: dquota write failed [ 136.182022][ T7024] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 136.193132][ T7024] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.1000: Failed to acquire dquot type 0 [ 136.295197][ T7024] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #16: comm syz.3.1000: corrupted inode contents [ 136.347019][ T7024] EXT4-fs error (device loop3): ext4_dirty_inode:6040: inode #16: comm syz.3.1000: mark_inode_dirty error [ 136.377487][ T7024] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #16: comm syz.3.1000: corrupted inode contents [ 136.378705][ T6994] BTRFS info (device loop2): enabling ssd optimizations [ 136.416897][ T7024] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.1000: mark_inode_dirty error [ 136.461244][ T7024] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #16: comm syz.3.1000: corrupted inode contents [ 136.498344][ T7024] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 136.523666][ T7024] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #16: comm syz.3.1000: corrupted inode contents [ 136.554275][ T7024] EXT4-fs error (device loop3): ext4_truncate:4273: inode #16: comm syz.3.1000: mark_inode_dirty error [ 136.591002][ T4243] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 136.605898][ T7024] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 136.659432][ T7024] EXT4-fs (loop3): 1 truncate cleaned up [ 136.684168][ T7024] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue. Quota mode: writeback. [ 136.764068][ T7012] erofs: (device loop1): mounted with root inode @ nid 36. [ 136.769243][ T7024] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.882607][ T4243] usb 5-1: Using ep0 maxpacket: 8 [ 137.201909][ T4243] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 137.219478][ T4243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.257977][ T4243] usb 5-1: Product: syz [ 137.270786][ T4243] usb 5-1: Manufacturer: syz [ 137.275636][ T4243] usb 5-1: SerialNumber: syz [ 137.296421][ T4243] usb 5-1: config 0 descriptor?? [ 137.368369][ T4243] gspca_main: se401-2.14.0 probing 047d:5003 [ 137.575953][ T7117] loop2: detected capacity change from 0 to 1764 [ 137.703234][ T7117] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 138.022612][ T4243] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 138.130941][ T4243] usb 5-1: USB disconnect, device number 10 [ 139.110966][ T7186] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1042'. [ 139.163391][ T7186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1042'. [ 139.179071][ T7156] loop2: detected capacity change from 0 to 32768 [ 139.218296][ T7186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1042'. [ 139.238662][ T7186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1042'. [ 139.315286][ T7156] JBD2: Ignoring recovery information on journal [ 139.588989][ T7204] loop1: detected capacity change from 0 to 2048 [ 139.596467][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1047'. [ 139.608276][ T7156] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 139.912769][ T7156] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 139.945261][ T7156] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 139.998695][ T7156] OCFS2: File system is now read-only. [ 140.031570][ T7156] (syz.2.1032,7156,0):ocfs2_trim_mainbm:7604 ERROR: status = -30 [ 140.041996][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1056'. [ 140.112565][ T4183] ocfs2: Unmounting device (7,2) on (node local) [ 140.429203][ T7249] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1061'. [ 140.468931][ T7251] tipc: Started in network mode [ 140.482268][ T7251] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 140.522221][ T7251] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 140.530888][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 140.563681][ T7251] tipc: Enabled bearer , priority 10 [ 140.709970][ T7229] loop4: detected capacity change from 0 to 32768 [ 140.939796][ T7] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 140.956949][ T7] usb 4-1: config 0 has no interface number 0 [ 140.980949][ T7] usb 4-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 141.002452][ T7] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 141.039052][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.075059][ T7] usb 4-1: config 0 descriptor?? [ 141.319597][ T7204] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.346115][ T7] usb 4-1: USB disconnect, device number 13 [ 141.585781][ T5810] tipc: Node number set to 1 [ 141.720338][ T7290] loop5: detected capacity change from 0 to 32768 [ 141.800019][ T7290] JBD2: Ignoring recovery information on journal [ 141.808562][ T7290] JBD2: corrupted journal superblock [ 141.825976][ T7290] JBD2: error -117 scanning journal [ 141.840865][ T7290] (syz.5.1073,7290,0):ocfs2_journal_wipe:1154 ERROR: status = -117 [ 141.903225][ T7290] (syz.5.1073,7290,0):ocfs2_check_volume:2424 ERROR: status = -117 [ 141.924186][ T7229] [ 141.924186][ T7229] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.924186][ T7229] [ 141.954419][ T7313] loop3: detected capacity change from 0 to 64 [ 141.966461][ T7290] (syz.5.1073,7290,0):ocfs2_check_volume:2493 ERROR: status = -117 [ 142.002170][ T7290] (syz.5.1073,7290,0):ocfs2_mount_volume:1824 ERROR: status = -117 [ 142.054549][ T144] [ 142.054549][ T144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.054549][ T144] [ 142.077124][ T144] [ 142.077124][ T144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.077124][ T144] [ 142.101310][ T7290] (syz.5.1073,7290,0):ocfs2_fill_super:1177 ERROR: status = -117 [ 142.111902][ T4191] [ 142.111902][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.111902][ T4191] [ 142.118920][ T7317] loop2: detected capacity change from 0 to 64 [ 142.132534][ T276] [ 142.132534][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.132534][ T276] [ 142.146099][ T4191] [ 142.146099][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.146099][ T4191] [ 142.160964][ T276] ================================================================== [ 142.169564][ T276] BUG: KASAN: use-after-free in txEnd+0x329/0x520 [ 142.175996][ T276] Write of size 8 at addr ffff88805fbe4840 by task jfsCommit/276 [ 142.183711][ T276] [ 142.186045][ T276] CPU: 0 PID: 276 Comm: jfsCommit Not tainted 5.15.189-syzkaller #0 [ 142.194027][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.204097][ T276] Call Trace: [ 142.207377][ T276] [ 142.210310][ T276] dump_stack_lvl+0x168/0x230 [ 142.214996][ T276] ? show_regs_print_info+0x20/0x20 [ 142.220199][ T276] ? load_image+0x3b0/0x3b0 [ 142.224701][ T276] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 142.230077][ T276] ? __mutex_unlock_slowpath+0x406/0x6a0 [ 142.235714][ T276] print_address_description+0x60/0x2d0 [ 142.241268][ T276] ? txEnd+0x329/0x520 [ 142.245348][ T276] kasan_report+0xdf/0x130 [ 142.249765][ T276] ? txEnd+0x329/0x520 [ 142.253842][ T276] kasan_check_range+0x27b/0x290 [ 142.258784][ T276] txEnd+0x329/0x520 [ 142.262682][ T276] jfs_lazycommit+0x5ba/0xb20 [ 142.267365][ T276] ? txFreelock+0x5a0/0x5a0 [ 142.271867][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 142.277762][ T276] ? sched_dynamic_update+0x210/0x210 [ 142.283139][ T276] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 142.289042][ T276] ? __kthread_parkme+0x157/0x1b0 [ 142.294071][ T276] kthread+0x436/0x520 [ 142.298135][ T276] ? txFreelock+0x5a0/0x5a0 [ 142.302636][ T276] ? kthread_blkcg+0xd0/0xd0 [ 142.307224][ T276] ret_from_fork+0x1f/0x30 [ 142.311649][ T276] [ 142.314699][ T276] [ 142.317015][ T276] Allocated by task 7229: [ 142.321329][ T276] __kasan_kmalloc+0xb5/0xf0 [ 142.325917][ T276] lmLogOpen+0x2c0/0xf90 [ 142.330154][ T276] jfs_mount_rw+0xf2/0x5c0 [ 142.334563][ T276] jfs_fill_super+0x5bb/0xaf0 [ 142.339233][ T276] mount_bdev+0x287/0x3c0 [ 142.343573][ T276] legacy_get_tree+0xe6/0x180 [ 142.348250][ T276] vfs_get_tree+0x88/0x270 [ 142.352662][ T276] do_new_mount+0x24a/0xa40 [ 142.357160][ T276] __se_sys_mount+0x2d6/0x3c0 [ 142.361833][ T276] do_syscall_64+0x4c/0xa0 [ 142.366248][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.372139][ T276] [ 142.374463][ T276] Freed by task 4191: [ 142.378432][ T276] kasan_set_track+0x4b/0x70 [ 142.383026][ T276] kasan_set_free_info+0x1f/0x40 [ 142.387959][ T276] ____kasan_slab_free+0xd5/0x110 [ 142.392982][ T276] slab_free_freelist_hook+0xea/0x170 [ 142.398349][ T276] kfree+0xef/0x2a0 [ 142.402163][ T276] lmLogClose+0x293/0x520 [ 142.406490][ T276] jfs_umount+0x28f/0x360 [ 142.410815][ T276] jfs_put_super+0x88/0x190 [ 142.415313][ T276] generic_shutdown_super+0x130/0x300 [ 142.420684][ T276] kill_block_super+0x7c/0xe0 [ 142.425359][ T276] deactivate_locked_super+0x93/0xf0 [ 142.430644][ T276] cleanup_mnt+0x418/0x4d0 [ 142.435063][ T276] task_work_run+0x125/0x1a0 [ 142.439652][ T276] exit_to_user_mode_loop+0x10f/0x130 [ 142.445024][ T276] exit_to_user_mode_prepare+0xb1/0x140 [ 142.450570][ T276] syscall_exit_to_user_mode+0x16/0x40 [ 142.456027][ T276] do_syscall_64+0x58/0xa0 [ 142.460453][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.466350][ T276] [ 142.468669][ T276] The buggy address belongs to the object at ffff88805fbe4800 [ 142.468669][ T276] which belongs to the cache kmalloc-1k of size 1024 [ 142.482717][ T276] The buggy address is located 64 bytes inside of [ 142.482717][ T276] 1024-byte region [ffff88805fbe4800, ffff88805fbe4c00) [ 142.495995][ T276] The buggy address belongs to the page: [ 142.501625][ T276] page:ffffea00017ef800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fbe0 [ 142.511863][ T276] head:ffffea00017ef800 order:3 compound_mapcount:0 compound_pincount:0 [ 142.520190][ T276] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 142.528181][ T276] raw: 00fff00000010200 ffffea0001f56c00 0000000500000005 ffff888016841dc0 [ 142.536782][ T276] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 142.545363][ T276] page dumped because: kasan: bad access detected [ 142.551803][ T276] page_owner tracks the page as allocated [ 142.557508][ T276] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 20, ts 137079661647, free_ts 137061854713 [ 142.577390][ T276] get_page_from_freelist+0x1b77/0x1c60 [ 142.582948][ T276] __alloc_pages+0x1e1/0x470 [ 142.587546][ T276] new_slab+0xc0/0x4b0 [ 142.591626][ T276] ___slab_alloc+0x81e/0xdf0 [ 142.596212][ T276] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 142.602017][ T276] __alloc_skb+0x22c/0x750 [ 142.606455][ T276] synproxy_send_client_synack+0x169/0xdd0 [ 142.612270][ T276] nft_synproxy_eval_v4+0x36b/0x560 [ 142.617471][ T276] nft_synproxy_do_eval+0x341/0x570 [ 142.622664][ T276] nft_do_chain+0x3fc/0x1420 [ 142.627254][ T276] nft_do_chain_inet+0x22b/0x300 [ 142.632190][ T276] nf_hook_slow+0xb9/0x200 [ 142.636600][ T276] NF_HOOK+0x1cb/0x360 [ 142.640662][ T276] NF_HOOK+0x2d6/0x360 [ 142.644724][ T276] __netif_receive_skb+0xcc/0x290 [ 142.649743][ T276] process_backlog+0x364/0x780 [ 142.654511][ T276] page last free stack trace: [ 142.659176][ T276] free_unref_page_prepare+0x637/0x6c0 [ 142.664651][ T276] free_unref_page+0x94/0x280 [ 142.669325][ T276] __unfreeze_partials+0x1a5/0x200 [ 142.674438][ T276] put_cpu_partial+0x12d/0x190 [ 142.679199][ T276] qlist_free_all+0x35/0x90 [ 142.683719][ T276] kasan_quarantine_reduce+0x150/0x160 [ 142.689176][ T276] __kasan_slab_alloc+0x2f/0xd0 [ 142.694027][ T276] slab_post_alloc_hook+0x4c/0x380 [ 142.699138][ T276] kmem_cache_alloc+0x100/0x290 [ 142.703992][ T276] getname_flags+0xb5/0x500 [ 142.708498][ T276] user_path_at_empty+0x2a/0x190 [ 142.713438][ T276] vfs_statx+0x102/0x4d0 [ 142.717677][ T276] __x64_sys_newfstatat+0x12c/0x1b0 [ 142.722877][ T276] do_syscall_64+0x4c/0xa0 [ 142.727294][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.733319][ T276] [ 142.735642][ T276] Memory state around the buggy address: [ 142.741262][ T276] ffff88805fbe4700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 142.749329][ T276] ffff88805fbe4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 142.757388][ T276] >ffff88805fbe4800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.765442][ T276] ^ [ 142.771593][ T276] ffff88805fbe4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.779649][ T276] ffff88805fbe4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.787708][ T276] ================================================================== [ 142.795768][ T276] Disabling lock debugging due to kernel taint [ 142.815208][ T276] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.822862][ T276] CPU: 0 PID: 276 Comm: jfsCommit Tainted: G B 5.15.189-syzkaller #0 [ 142.832226][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.842275][ T276] Call Trace: [ 142.845541][ T276] [ 142.848450][ T276] dump_stack_lvl+0x168/0x230 [ 142.853111][ T276] ? show_regs_print_info+0x20/0x20 [ 142.858398][ T276] ? load_image+0x3b0/0x3b0 [ 142.862906][ T276] panic+0x2c9/0x7f0 [ 142.866794][ T276] ? bpf_jit_dump+0xd0/0xd0 [ 142.871377][ T276] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 142.877253][ T276] ? _raw_spin_unlock+0x40/0x40 [ 142.882078][ T276] ? txEnd+0x329/0x520 [ 142.886123][ T276] check_panic_on_warn+0x80/0xa0 [ 142.891040][ T276] ? txEnd+0x329/0x520 [ 142.895086][ T276] end_report+0x6d/0xf0 [ 142.899217][ T276] kasan_report+0x102/0x130 [ 142.903697][ T276] ? txEnd+0x329/0x520 [ 142.907742][ T276] kasan_check_range+0x27b/0x290 [ 142.912659][ T276] txEnd+0x329/0x520 [ 142.916536][ T276] jfs_lazycommit+0x5ba/0xb20 [ 142.921194][ T276] ? txFreelock+0x5a0/0x5a0 [ 142.925678][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 142.931556][ T276] ? sched_dynamic_update+0x210/0x210 [ 142.937004][ T276] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 142.942880][ T276] ? __kthread_parkme+0x157/0x1b0 [ 142.947886][ T276] kthread+0x436/0x520 [ 142.951930][ T276] ? txFreelock+0x5a0/0x5a0 [ 142.956414][ T276] ? kthread_blkcg+0xd0/0xd0 [ 142.960980][ T276] ret_from_fork+0x1f/0x30 [ 142.965378][ T276] [ 142.968666][ T276] Kernel Offset: disabled [ 142.972974][ T276] Rebooting in 86400 seconds..